Re: "Open source is free to get, but I wouldn't say free to use"
I certainly agree with your concern about infinite dependency chains.
FYI - Node has a native "https" module: [ https://nodejs.org/api/https.html ] as well as a more developed http module.