refactor(deps): replace url-parse with native URL API

Remove the `url-parse` dependency in favor of the native `URL` class,
which has been available since Node.js v10 (the SDK's minimum supported
version). This eliminates an unnecessary dependency and reduces bundle
size.

Fixes #106

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Kyzgor

package.json

@@ -63,8 +63,7 @@
     "path-to-regexp": "^6.2.1",
     "pino": "8.11.0",
     "pino-pretty": "10.2.0",
-    "require-in-the-middle": "^5.1.0",
-    "url-parse": "^1.5.10"
+    "require-in-the-middle": "^5.1.0"
   },
   "devDependencies": {
     "@ava/typescript": "^1.1.1",
@@ -74,7 +73,6 @@
     "@types/express": "^4.17.9",
     "@types/lodash": "^4.14.166",
     "@types/node": "^14.14.14",
-    "@types/url-parse": "^1.4.11",
     "@typescript-eslint/eslint-plugin": "^4.0.1",
     "@typescript-eslint/parser": "^4.0.1",
     "ava": "^3.12.1",

src/enforcement/enforcer.ts

@@ -1,6 +1,5 @@
 import axios, { AxiosInstance } from 'axios';
 import { Logger } from 'pino';
-import URL from 'url-parse';
 
 import { IPermitConfig } from '../config';
 import { CheckConfig, Context, ContextStore } from '../utils/context';
@@ -134,8 +133,8 @@ export class Enforcer implements IEnforcer {
    */
   constructor(private config: IPermitConfig, private logger: Logger) {
     const opaBaseUrl = new URL(this.config.pdp);
-    opaBaseUrl.set('port', '8181');
-    opaBaseUrl.set('pathname', `${opaBaseUrl.pathname}v1/data/permit/`);
+    opaBaseUrl.port = '8181';
+    opaBaseUrl.pathname = `${opaBaseUrl.pathname}v1/data/permit/`;
     const version = process.env.npm_package_version ?? 'unknown';
     if (config.axiosInstance) {
       this.client = config.axiosInstance;