Quasar: Quasar 1.9.5 Contains a require('crypto')

[aljones15]

Before you Start
If you are reporting a potential security threat, vulnerability or exploit in Quasar or one of its upstream dependencies, please read Report a vulnerability and DO NOT disclose publicly as an Issue.

Describe the bug
A clear and concise description of what the bug is.

Quasar 1.9.5 adds a call on /quasar/src/utils/uid.js line 21 to require('crypto')

On webpack start up this optional require is being called and resulting in an error in the browser.

Codepen/jsFiddle/Codesandbox (required)
Fork a Codepen (https://codepen.quasar.dev) or a jsFiddle (https://jsfiddle.quasar.dev) or a Codesandbox (https://codesandbox.quasar.dev) and hit save then copy-paste link here.

To Reproduce
Steps to reproduce the behavior:

1. npm install --save [email protected]
2. Initiate a webpack build in a browser environment
3. A static analysis (probably from webpack) is calling on the require('crypto') statement.

Expected behavior
A clear and concise description of what you expected to happen.

I expect quasar to build with out a giantic crypto polyfil.

Screenshots
If applicable, add screenshots to help explain your problem.

Platform (please complete the following information):
OS: ubuntu linux
Node: 12
NPM: 6.13.4
Yarn:
Browsers: chrome
iOS:
Android:
Electron:

Additional context
Add any other context about the problem here.

[rstoenescu]

Can you supply a reproduction repo for your use case. I get that you are not using Quasar CLI.

[aljones15]

We're using bedrock-webpack
The project the build failure came from I'm not sure if the repo is public.

[rstoenescu]

Reverted new implementation on uid() which fixes the issue in "quasar" v1.9.6.
Thanks for reporting this.

[rstoenescu]

Forgot to mention that v1.9.6 is released.

[aljones15]

Thanks man and great framework.