Using js-sha256 as a dependency causes eval warnings when using rollup

[NewDark90]

This issue could almost be copied verbatim from here, and exists as an open issue here.

When performing a build with Rollup of a project containing @unstoppabledomains/resolution, you get the following message: Use of eval is strongly discouraged, as it poses security risks and may cause issues with minification.

eval is used in the library js-sha256 which is a dependency of @unstoppabledomains/resolution. There are numerous issues that have been opened about emn178/js-sha256#18, some open (like this), some closed without resolution. There have been no updates to the package since 2017.

Is there an alternative that @unstoppabledomains/resolution can use instead?

The SubtleCrypto API from the browser and Node 15+ is a possible suggestion https://caniuse.com/mdn-api_crypto_subtle

[enaqx]

Thanks, we have updated to use crypto-js instead. 4c40938#diff-a920b5f0fd3204eb7b57821f71298c43c5b91567fbb943e0d1c47e79d4134a74L1