Backport fix to CommonJS version too

Author: ai

index.cjs

@@ -11,6 +11,7 @@ const POOL_SIZE_MULTIPLIER = 128
 let pool, poolOffset
 
 let fillPool = bytes => {
+  if (bytes < 0 || bytes > 1024) throw new RangeError('Wrong ID size')
   if (!pool || pool.length < bytes) {
     pool = Buffer.allocUnsafe(bytes * POOL_SIZE_MULTIPLIER)
     crypto.randomFillSync(pool)