stub out package that uses eval

src/errata/inquire.js

@@ -0,0 +1,4 @@
+// We intend to run in browsers, which don't support runtime `require`.
+// https://github.com/protobufjs/protobuf.js/pull/1548/files#r588874248
+// Stub this out to prevent CSP spam.
+module.exports = () => null;

webpack.config.js

@@ -73,6 +73,11 @@ module.exports = (env, argv) => {
         },
       ],
     },
+    resolve: {
+      alias: {
+        '@protobufjs/inquire': path.resolve(__dirname, "./src/errata/inquire"),
+      },
+    },
     plugins: getPlugins(isDev),
     performance: getPerformance(),
     node: {