Remove sri-toolbox dependency.

We can achieve the same very easily.

diff --git a/build/generate-sri.js b/build/generate-sri.js
index 4d5c25c44e067db22f62228d018214c6e2b117b0..8d0fedc4abbd202643b77803cf57843393180451 100644 (file)
--- a/build/generate-sri.js
+++ b/build/generate-sri.js
@@ -10,9 +10,9 @@
  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
  */
 
+const crypto = require('crypto')
 const fs = require('fs')
 const path = require('path')
-const sriToolbox = require('sri-toolbox')
 const sh = require('shelljs')
 
 sh.config.fatal = true
@@ -47,9 +47,9 @@ files.forEach((file) => {
       throw err
     }
 
-    const integrity = sriToolbox.generate({
-      algorithms: ['sha384']
-    }, data)
+    const algo = 'sha384'
+    const hash = crypto.createHash(algo).update(data, 'utf8').digest('base64')
+    const integrity = `${algo}-${hash}`
 
     console.log(`${file.configPropertyName}: ${integrity}`)
 

diff --git a/package-lock.json b/package-lock.json
index ca00df80b9ef2527406b29357ee12abd7642b324..b9b314d6753966389f82837cb1483f05ade4fdcb 100644 (file)
--- a/package-lock.json
+++ b/package-lock.json
@@ -9920,12 +9920,6 @@
       "integrity": "sha1-BOaSb2YolTVPPdAVIDYzuFcpfiw=",
       "dev": true
     },
-    "sri-toolbox": {
-      "version": "0.2.0",
-      "resolved": "https://registry.npmjs.org/sri-toolbox/-/sri-toolbox-0.2.0.tgz",
-      "integrity": "sha1-p/6lw/3lXmdc8cjAbz67XCk1g14=",
-      "dev": true
-    },
     "sshpk": {
       "version": "1.14.2",
       "resolved": "https://registry.npmjs.org/sshpk/-/sshpk-1.14.2.tgz",

diff --git a/package.json b/package.json
index cd4541f747397b2f54864be8c18363596e02e34e..7fd1623188fd4985f04b57f1fbe7c526f86520dc 100644 (file)
--- a/package.json
+++ b/package.json
@@ -135,7 +135,6 @@
     "shelljs": "^0.8.2",
     "shx": "^0.3.2",
     "sinon": "^6.3.5",
-    "sri-toolbox": "^0.2.0",
     "stylelint": "^9.6.0",
     "stylelint-config-recommended-scss": "^3.2.0",
     "stylelint-config-standard": "^18.2.0",