fix: remove need for unsafe-eval

As we are still using `commonjs` in our `tsconfig.json` this commit uses
`#paths` to overwrite the import path for the types only.

The types are the same now, but could theoretically drift in the future.

lib/dataconnection/StreamConnection/Cbor.ts

@@ -1,5 +1,5 @@
 import type { Peer } from "../../peer.js";
-import { Decoder, Encoder } from "cbor-x";
+import { Decoder, Encoder } from "cbor-x/index-no-eval";
 import { StreamConnection } from "./StreamConnection.js";
 
 const NullValue = Symbol.for(null);

tsconfig.json

@@ -8,7 +8,10 @@
  "skipLibCheck": true,
  "isolatedModules": true,
  "resolveJsonModule": true,
- "lib": ["es2020", "dom"]
+ "lib": ["es2020", "dom"],
+ "paths": {
+ "cbor-x/index-no-eval": ["./node_modules/cbor-x"],
+ }
  },
  "exclude": ["node_modules", "dist", "e2e"]
 }