#1111481 node-rjsf: Wrongly pulls the cjs module of nanoid

Package:
node-rjsf
Source:
node-rjsf
Submitter:
Jérémy Lal
Date:
2026-04-29 00:57:03 UTC
Severity:
normal
Tags:
#1111481#5
Date:
2025-08-16 13:47:07 UTC
From:
To:
node-rjsf builds esm/cjs bundles,
and depends on node-nanoid.

node-nanoid correctly exports a browser bundle,
but node-rjsf doesn't use that file, it uses the cjs file,
which require "node:crypto": that's really bad, because
the nanoid/index.browser.js file instead use native window.crypto.getRandomValues,
and they are not interchangeable.

This produces bugs when a project makes a bundle with @rjsf/core in it,
webpack will complain about node: prefix not supported,
but problem isn't in webpack at all, it's really a problem with rjsf.

#1111481#14
Date:
2026-03-11 22:48:06 UTC
From:
To:
Hello,

Bug #1111481 in node-rjsf reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/js-team/node-rjsf/-/commit/139fd533d62473dadf6965c683e7c20580839880

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1111481