Security Fix

package.json

@@ -61,6 +61,6 @@
   "dependencies": {
     "@synonymdev/result": "0.0.2",
     "adm-zip": "^0.5.9",
-    "request": "^2.88.2"
+    "axios": "^1.7.7"
   }
 }

src/installer.js

@@ -1,4 +1,4 @@
-const request = require('request');
+const axios = require('axios');
 const fs = require('fs');
 var AdmZip = require('adm-zip');
 
@@ -7,14 +7,25 @@ var fileUrl = 'https://github.com/bitcoindevkit/bdk-swift/releases/download/0.30
 const src = 'ios/bdkFFI.xcframework.zip';
 const target = 'ios/';
 
-try {
-  request(fileUrl)
-    .pipe(fs.createWriteStream(src))
-    .on('close', function () {
+async function downloadAndExtract() {
+  try {
+    const response = await axios({
+      url: fileUrl,
+      method: 'GET',
+      responseType: 'stream',
+    });
+
+    const dest = fs.createWriteStream(src);
+    response.data.pipe(dest);
+
+    dest.on('finish', () => {
       var zip = new AdmZip(src);
       zip.extractAllTo(target, true);
       fs.unlinkSync(src);
     });
-} catch (err) {
-  console.log(err);
+  } catch (err) {
+    console.log(err);
+  }
 }
+
+downloadAndExtract();