The package `extend 3.0.1`, which is a dependency of `request 2.87` has a vulnerability : https://hackerone.com/reports/381185 Upgrade `request` to v.2.88 will install `extend` v.3.0.2, the fixed version. Fix #2496
