chore: update deps and quit analytics

Author: piraces

.eleventy.js

@@ -44,7 +44,6 @@ const { DateTime } = require("luxon");
 const { promisify } = require("util");
 const fs = require("fs");
 const path = require("path");
-const hasha = require("hasha");
 const touch = require("touch");
 const readFile = promisify(fs.readFile);
 const readdir = promisify(fs.readdir);
@@ -61,6 +60,12 @@ const { partytownSnippet } = require('@builder.io/partytown/integration');
 const { copyLibFiles } = require('@builder.io/partytown/utils');
 
 module.exports = function (eleventyConfig) {
+  let hasha;
+
+  eleventyConfig.on('eleventy.before', async ({}) => {
+    hasha = await import('hasha');
+  });
+
   eleventyConfig.addPlugin(pluginRss);
   eleventyConfig.addPlugin(pluginSyntaxHighlight);
   eleventyConfig.addPlugin(pluginNavigation);
@@ -98,7 +103,7 @@ module.exports = function (eleventyConfig) {
         encoding: "utf-8",
       })
         .then((content) => {
-          return hasha.async(content);
+          return hasha.hash(content);
         })
         .then((hash) => {
           callback(null, `${absolutePath}?hash=${hash.substr(0, 10)}`);

_data/csp.js

@@ -32,17 +32,17 @@ const SELF = quote("self");
 const CSP = {
   regular: serialize([
     // By default only talk to same-origin
-    ["default-src", SELF, 'https://stats.piraces.co/', 'https://giscus.app'],
+    ["default-src", SELF, 'https://giscus.app'],
     // No plugins
     ["object-src", quote("none")],
     // Script from same-origin, inline-hashes and unsafe-eval
-    ["script-src", SELF, 'https://stats.piraces.co/', 'https://cdn.jsdelivr.net', 'https://unpkg.com', 'https://giscus.app', quote("unsafe-eval"), /* Replaced by csp.js plugin */ "HASHES"],
+    ["script-src", SELF, 'https://cdn.jsdelivr.net', 'https://unpkg.com', 'https://giscus.app', quote("unsafe-eval"), /* Replaced by csp.js plugin */ "HASHES"],
     // Inline CSS is allowed.
     ["style-src", quote("unsafe-inline")],
     // Images may also come from data-URIs.
     ["img-src", SELF, "data:", "https://gh-card.dev", "blob:"],
     // connect-src to allow some connections to APIs
-    ["connect-src", SELF, 'https://stats.piraces.co', 'https://cdn.jsdelivr.net', "https://api.hackertarget.com", "blob:"],
+    ["connect-src", SELF, 'https://cdn.jsdelivr.net', "https://api.hackertarget.com", "blob:"],
     // frame-ancestors to allow iframes from same origin
     ["frame-ancestors", SELF]
 

_includes/layouts/base.njk

@@ -47,7 +47,6 @@
     </script>
     <script type="text/partytown" async defer src="{{ "/js/pwa.js" | addHash }}"></script>
     <script type="text/partytown" async defer src="{{ "/js/search.js" | addHash }}"></script>
-    <script type="text/partytown" async defer src="https://stats.piraces.co/script.js" data-website-id="8546dad7-f5d8-4982-b29e-912416a116cf"></script>
     <link rel="manifest" href="/manifest.webmanifest" />
     <!-- Notably iOS UAs also contain Mac OS X -->
     <script csp-hash>if (/Mac OS X/.test(navigator.userAgent))document.documentElement.classList.add('apple')

package-lock.json

@@ -52,7 +52,7 @@
     "csso": "^5.0.5",
     "datauri": "^4.1.0",
     "expect.js": "^0.3.1",
-    "hasha": "^5.2.2",
+    "hasha": "^6.0.0",
     "html-minifier": "^4.0.0",
     "image-size": "^1.1.0",
     "jimp": "^0.22.10",

package.json

@@ -63,7 +63,7 @@ describe("check build output for a generic post", () => {
 
     it("should have script elements", () => {
       const scripts = doc.querySelectorAll("script[src]");
-      expect(scripts).to.have.length(5); // NOTE: update this when adding more <script>
+      expect(scripts).to.have.length(4); // NOTE: update this when adding more <script>
       expect(scripts[0].getAttribute("src")).to.match(
         /^\/js\/min\.js\?hash=\w+/
       );