Library does not work under strict Content-Security-Policy

[Seaviello]

Because of the following code:

var crypto = eval("require('crypto')");
var Buffer = eval("require('buffer').Buffer");

library does not work, when the Content-Security-Policy does not include unsafe-eval.

[ljharb]

Why is eval used at all here?

[emn178]

remove eval in v0.10.0