[Copilot]

The SDK carried 27 transitive production dependencies via axios and form-data. All LTS Node.js versions (18+) ship native fetch, FormData, Blob, URLSearchParams, and AbortController, making both packages unnecessary.

Changes

• lib/client/request.js

  • Replaced axios.request with native fetch; return shape preserved as { data } — no callers change
  • Replaced npm form-data with native FormData; Node.js ReadStream values are streamed to Buffer → Blob before appending (native FormData doesn't accept streams directly)
  • Content-Type header omitted for multipart requests so fetch sets the correct boundary automatically
  • Timeout implemented via AbortController + setTimeout (replaces axios timeout option)
  • Query params serialized with URLSearchParams (replaces axios params option)

• package.json — axios and form-data removed from dependencies; SDK now has zero production runtime dependencies

// Before — 27 transitive deps
const axios = require('axios').default;
const FormData = require('form-data');

// After — no deps, same external behaviour
const controller = new AbortController();
const response = await fetch(api_url, { method, headers, body, signal: controller.signal });
return { data: await response.json() };

• Fixes Consider switching to native fetch #78

[draaglom]

thanks for taking a look at this so quickly!