Warning from vite about using eval

[crystalfp]

Bottleneck has served me well in a standalone typescript application (not involving Redis). Now I moved this code inside an Electron application built using vite and the following warnings appear during build for development and production:

node_modules/bottleneck/lib/RedisConnection.js (18:21) Use of eval in "node_modules/bottleneck/lib/RedisConnection.js" is strongly discouraged as it poses security risks and may cause issues with minification.
node_modules/bottleneck/lib/IORedisConnection.js (26:21) Use of eval in "node_modules/bottleneck/lib/IORedisConnection.js" is strongly discouraged as it poses security risks and may cause issues with minification.

I don't use Redis. Is it possible to load these modules only if Redis is used? Well, seems everything works in spite of these warning, but they are annoying. Thanks. mario

[toddb]

You can suppress the specific warning in the console for vite via the rollup options

import { defineConfig } from 'vite';

export default defineConfig({
  build: {
    rollupOptions: {
      onwarn(warning, warn) {
        // Suppress "Use of eval in" warnings
        if (warning.code === 'EVAL') {
          /*
           * Bottleneck has two instances of eval
           * node_modules/bottleneck/lib/RedisConnection.js (18:21) Use of eval in "node_modules/bottleneck/lib/RedisConnection.js" is strongly discouraged as it poses security risks and may cause issues with minification.
           * node_modules/bottleneck/lib/IORedisConnection.js (26:21) Use of eval in "node_modules/bottleneck/lib/IORedisConnection.js" is strongly discouraged as it poses security risks and may cause issues with minification.
           */
          if (warning.id?.includes('RedisConnection.js')) {
              return;
          }
        }
        // Use default for everything else
        warn(warning);
      },
    },
  },
})

[crystalfp]

Thanks a lot @toddb ! Unfortunately the warning is still here running npx vite build. After putting your code inside vite.config.mts and even adding a onLog function, seems these functions are never called (having added a good, old console.log...). Instead, the other rollup options like output: {manualChunks: work. Anyway, thanks for your help! mario

[crystalfp]

Maybe the problem is https://github.com/vitejs/vite/issues/13624 So seems there is no solution for now.

[toddb]

Strange because it did work for me as expected using onwarn and I played around with understanding the object codes, etc.

Couple of notes:

• I'm using yarn
• onLog is still open as a ticket, so wouldn't expect it to work

Good luck!

[tim784]

You can suppress the specific warning in the console for vite via the rollup options

This solution did work for me. Thanks!

[onekiloparsec]

Personally, not happy with tweaking the config, and given the lib seems not maintained anymore, I switched to https://github.com/sindresorhus/p-throttle. Works well.

[bertrandg]

In addition to @onekiloparsec comment, I switched to https://github.com/sindresorhus/p-limit for my usecase which works like a charm too.