@localnerve/csp-hashes 7.1.0 → 8.0.1

package/lib/index.js

@@ -82,11 +82,11 @@ export function createCspHash(input, algo = 'sha256') {
  * users who just have a few files to process and will handle I/O themselves,
  * without needing a stream.
  *
- * @param {String} [algo] - hash algorithm, default sha256. Can be sha384, sha512.
  * @param {Buffer|String} content - The HTML content to extract hashes from.
+ * @param {String} [algo] - hash algorithm, default sha256. Can be sha384, sha512.
  * @returns {Object} The hashes object with script and style elements and attributes.
  */
-export function cspHashes (algo = 'sha256', content) {
+export function cspHashes (content, algo = 'sha256') {
   if (!/^sha(256|384|512)$/.test(algo)) {
     throw new Error('algo option must be one of "sha256", "sha384", or "sha512" only.');
   }
@@ -143,7 +143,7 @@ export function hashstream ({
       const path = file.path;
       const content = file.contents;
 
-      const hashes = cspHashes(algo, content);
+      const hashes = cspHashes(content, algo);
   
       if (replace) {
         const s = callback(path, hashes, content.toString());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@localnerve/csp-hashes",
-  "version": "7.1.0",
+  "version": "8.0.1",
   "description": "Flexible library to generate CSP hashes",
   "main": "index.js",
   "type": "module",
@@ -15,9 +15,9 @@
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "eslint": "^10.8.0",
-    "eslint-plugin-n": "^18.2.2",
-    "globals": "^17.8.0",
+    "eslint": "^10.8.1",
+    "eslint-plugin-n": "^18.3.0",
+    "globals": "^17.9.0",
     "vinyl": "^3.0.1"
   },
   "dependencies": {

package/readme.md

@@ -54,11 +54,11 @@ See [`hashstream options`](#hashstream-options) for a detailed explanation of th
 This library exports a convenience function that takes an algorithm and HTML content, and returns a hashes object containing all CSP hashes for inline scripts and styles. This is useful for users who just have a few files to process and will handle I/O themselves, without needing a stream.
 
 ```
-Object cspHashes(algo = 'sha256', content)
+Object cspHashes(content, algo = 'sha256')
 ```
 
-+ {String} **\[algo\]** - Optional - Defaults to `'sha256'`, can be one of 'sha256', 'sha384' or 'sha512'.
 + {Buffer|String} **content** - Required - The HTML content to extract hashes from.
++ {String} **\[algo\]** - Optional - Defaults to `'sha256'`, can be one of 'sha256', 'sha384' or 'sha512'.
 
 Returns a [`hashes` object](#callback-hashes-object) with the same structure as the `hashstream` callback receives:
 
@@ -215,7 +215,7 @@ import fs from 'node:fs';
 import { cspHashes } from '@localnerve/csp-hashes';
 
 const html = fs.readFileSync('./dist/index.html', { encoding: 'utf8' });
-const hashes = cspHashes('sha256', html);
+const hashes = cspHashes(html, 'sha256');
 
 console.log('Script element hashes:', hashes.script.elements.join(' '));
 console.log('Style attribute hashes:', hashes.style.attributes.join(' '));