There is a [vulnerability](https://nvd.nist.gov/vuln/detail/CVE-2018-3728) in the `hoek` package which is required by `hawk` that request depends on. Request depends on hawk version `~6.0.2`. Updating to hawk version `7.0.0` would fix the problem.