Remove the original dependency and switch it to URL module

[AlexHladin]

In the JS work available the URL class could easily substitute the original package.

[joeybaker]

Thanks! Makes a lot of sense. I'll let this sit for a bit to see if other maintainers want to weigh in.

[joeybaker]

@AlexHladin ping me in a week or so if this hasn't merged!

[JRichlen]

@AlexHladin @joeybaker Can this be merged and released? Trying to knock out some vulnerabilities picked up by a scanning tool. It found a high severity vulnerability (CVE-2022-0512) linked to url-parser in original. Merging this would eliminate that vulnerability from the transitive dependency (since it eliminates that dependency).

[AlexHladin]

@AlexHladin Can this be merged? Trying to knock out some vulnerabilities picked up by a scanning tool. It found a high severity vulnerability linked to url-parser in original. Merging this would eliminate that vulnerability from the transitive dependency (since it eliminates that dependency).

Yes, this PR could be merged

[otramony]

Great! This will also help my team remove the CVE-2022-0691 critical vulnerability in url-parse from our reports. Is there an ETA for a release?

[joeybaker]

v2 released!