Prebid 1.27.0 increased 30% in filesize

[benjaminclot]

Type of issue

Question

Description

The Criteo adapter just increased our Prebid's compiled file size by 30% (from 150KB to 210KB)... 👎

Steps to reproduce

Use the Criteo adapter

Platform details

Prebid.js 1.27.0

[mkendall07]

@benjaminclot
I required Criteo to add the signing to the verify the payload they eval is safe (to prevent executing unknown payloads.)

Unfortunately, due to Criteo's requirement to have the eval run synchronously, they imported external libraries to do the signing verification. The libraries themselves are only included when you include Criteo as a bidder.

[akira28]

Maybe it has already been asked, but why Criteo is allowed to use eval? Is the only adapter using it, and this causes the import of js-encrypt (more than 35kb gzipped)