@posthog/core 1.4.0 → 1.5.1

package/dist/process/spawn-local.d.ts

@@ -3,6 +3,6 @@ export declare function spawnLocal(binaryName: string, args: string[], options:
     stdio: 'inherit' | 'ignore';
     resolveFrom: string;
     cwd: string;
-    onBinaryFound: (binaryLocation: string) => void;
+    onBinaryFound?: (binaryLocation: string) => void;
 }): Promise<void>;
 //# sourceMappingURL=spawn-local.d.ts.map

package/dist/process/spawn-local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spawn-local.d.ts","sourceRoot":"","sources":["../../src/process/spawn-local.ts"],"names":[],"mappings":"AAGA,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IACP,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,KAAK,EAAE,SAAS,GAAG,QAAQ,CAAA;IAE3B,WAAW,EAAE,MAAM,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAA;CAChD,GACA,OAAO,CAAC,IAAI,CAAC,CAgCf"}
+{"version":3,"file":"spawn-local.d.ts","sourceRoot":"","sources":["../../src/process/spawn-local.ts"],"names":[],"mappings":"AAGA,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IACP,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,KAAK,EAAE,SAAS,GAAG,QAAQ,CAAA;IAE3B,WAAW,EAAE,MAAM,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAA;CACjD,GACA,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/process/spawn-local.js

@@ -26,21 +26,20 @@ __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
     spawnLocal: ()=>spawnLocal
 });
-const external_node_child_process_namespaceObject = require("node:child_process");
+const external_cross_spawn_namespaceObject = require("cross-spawn");
 const external_utils_js_namespaceObject = require("./utils.js");
 async function spawnLocal(binaryName, args, options) {
     let binaryLocation;
     try {
         binaryLocation = (0, external_utils_js_namespaceObject.resolveBinaryPath)(options.env.PATH ?? '', options.resolveFrom, binaryName);
-        options.onBinaryFound(binaryLocation);
+        options.onBinaryFound?.(binaryLocation);
     } catch (e) {
         console.error(e);
         throw new Error(`Binary ${binaryName} not found. Make sure postinstall script was allowed if it installs the binary`);
     }
-    const child = (0, external_node_child_process_namespaceObject.spawn)(binaryLocation, [
+    const child = (0, external_cross_spawn_namespaceObject.spawn)(binaryLocation, [
         ...args
     ], {
-        shell: true,
         stdio: options?.stdio ?? 'inherit',
         env: options.env,
         cwd: options.cwd

package/dist/process/spawn-local.mjs

@@ -1,10 +1,10 @@
-import { spawn } from "node:child_process";
+import { spawn } from "cross-spawn";
 import { resolveBinaryPath } from "./utils.mjs";
 async function spawnLocal(binaryName, args, options) {
     let binaryLocation;
     try {
         binaryLocation = resolveBinaryPath(options.env.PATH ?? '', options.resolveFrom, binaryName);
-        options.onBinaryFound(binaryLocation);
+        options.onBinaryFound?.(binaryLocation);
     } catch (e) {
         console.error(e);
         throw new Error(`Binary ${binaryName} not found. Make sure postinstall script was allowed if it installs the binary`);
@@ -12,7 +12,6 @@ async function spawnLocal(binaryName, args, options) {
     const child = spawn(binaryLocation, [
         ...args
     ], {
-        shell: true,
         stdio: options?.stdio ?? 'inherit',
         env: options.env,
         cwd: options.cwd

package/dist/utils/bot-detection.d.ts

@@ -0,0 +1,6 @@
+export declare const DEFAULT_BLOCKED_UA_STRS: string[];
+/**
+ * Block various web spiders from executing our JS and sending false capturing data
+ */
+export declare const isBlockedUA: (ua: string | undefined, customBlockedUserAgents?: string[]) => boolean;
+//# sourceMappingURL=bot-detection.d.ts.map

package/dist/utils/bot-detection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot-detection.d.ts","sourceRoot":"","sources":["../../src/utils/bot-detection.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB,UA+FnC,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,WAAW,GAAa,IAAI,MAAM,GAAG,SAAS,EAAE,0BAAyB,MAAM,EAAO,KAAG,OAWrG,CAAA"}

package/dist/utils/bot-detection.js

@@ -0,0 +1,125 @@
+"use strict";
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.d = (exports1, definition)=>{
+        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+            enumerable: true,
+            get: definition[key]
+        });
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+(()=>{
+    __webpack_require__.r = (exports1)=>{
+        if ('undefined' != typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+            value: 'Module'
+        });
+        Object.defineProperty(exports1, '__esModule', {
+            value: true
+        });
+    };
+})();
+var __webpack_exports__ = {};
+__webpack_require__.r(__webpack_exports__);
+__webpack_require__.d(__webpack_exports__, {
+    DEFAULT_BLOCKED_UA_STRS: ()=>DEFAULT_BLOCKED_UA_STRS,
+    isBlockedUA: ()=>isBlockedUA
+});
+const DEFAULT_BLOCKED_UA_STRS = [
+    'amazonbot',
+    'amazonproductbot',
+    'app.hypefactors.com',
+    'applebot',
+    'archive.org_bot',
+    'awariobot',
+    'backlinksextendedbot',
+    'baiduspider',
+    'bingbot',
+    'bingpreview',
+    'chrome-lighthouse',
+    'dataforseobot',
+    'deepscan',
+    'duckduckbot',
+    'facebookexternal',
+    'facebookcatalog',
+    'http://yandex.com/bots',
+    'hubspot',
+    'ia_archiver',
+    'leikibot',
+    'linkedinbot',
+    'meta-externalagent',
+    'mj12bot',
+    'msnbot',
+    'nessus',
+    'petalbot',
+    'pinterest',
+    'prerender',
+    'rogerbot',
+    'screaming frog',
+    'sebot-wa',
+    'sitebulb',
+    'slackbot',
+    'slurp',
+    'trendictionbot',
+    'turnitin',
+    'twitterbot',
+    'vercel-screenshot',
+    'vercelbot',
+    'yahoo! slurp',
+    'yandexbot',
+    'zoombot',
+    'bot.htm',
+    'bot.php',
+    '(bot;',
+    'bot/',
+    'crawler',
+    'ahrefsbot',
+    'ahrefssiteaudit',
+    'semrushbot',
+    'siteauditbot',
+    'splitsignalbot',
+    'gptbot',
+    'oai-searchbot',
+    'chatgpt-user',
+    'perplexitybot',
+    'better uptime bot',
+    'sentryuptimebot',
+    'uptimerobot',
+    'headlesschrome',
+    'cypress',
+    'google-hoteladsverifier',
+    'adsbot-google',
+    'apis-google',
+    'duplexweb-google',
+    'feedfetcher-google',
+    'google favicon',
+    'google web preview',
+    'google-read-aloud',
+    'googlebot',
+    'googleother',
+    'google-cloudvertexbot',
+    'googleweblight',
+    'mediapartners-google',
+    'storebot-google',
+    'google-inspectiontool',
+    'bytespider'
+];
+const isBlockedUA = function(ua, customBlockedUserAgents = []) {
+    if (!ua) return false;
+    const uaLower = ua.toLowerCase();
+    return DEFAULT_BLOCKED_UA_STRS.concat(customBlockedUserAgents).some((blockedUA)=>{
+        const blockedUaLower = blockedUA.toLowerCase();
+        return -1 !== uaLower.indexOf(blockedUaLower);
+    });
+};
+exports.DEFAULT_BLOCKED_UA_STRS = __webpack_exports__.DEFAULT_BLOCKED_UA_STRS;
+exports.isBlockedUA = __webpack_exports__.isBlockedUA;
+for(var __webpack_i__ in __webpack_exports__)if (-1 === [
+    "DEFAULT_BLOCKED_UA_STRS",
+    "isBlockedUA"
+].indexOf(__webpack_i__)) exports[__webpack_i__] = __webpack_exports__[__webpack_i__];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});

package/dist/utils/bot-detection.mjs

@@ -0,0 +1,88 @@
+const DEFAULT_BLOCKED_UA_STRS = [
+    'amazonbot',
+    'amazonproductbot',
+    'app.hypefactors.com',
+    'applebot',
+    'archive.org_bot',
+    'awariobot',
+    'backlinksextendedbot',
+    'baiduspider',
+    'bingbot',
+    'bingpreview',
+    'chrome-lighthouse',
+    'dataforseobot',
+    'deepscan',
+    'duckduckbot',
+    'facebookexternal',
+    'facebookcatalog',
+    'http://yandex.com/bots',
+    'hubspot',
+    'ia_archiver',
+    'leikibot',
+    'linkedinbot',
+    'meta-externalagent',
+    'mj12bot',
+    'msnbot',
+    'nessus',
+    'petalbot',
+    'pinterest',
+    'prerender',
+    'rogerbot',
+    'screaming frog',
+    'sebot-wa',
+    'sitebulb',
+    'slackbot',
+    'slurp',
+    'trendictionbot',
+    'turnitin',
+    'twitterbot',
+    'vercel-screenshot',
+    'vercelbot',
+    'yahoo! slurp',
+    'yandexbot',
+    'zoombot',
+    'bot.htm',
+    'bot.php',
+    '(bot;',
+    'bot/',
+    'crawler',
+    'ahrefsbot',
+    'ahrefssiteaudit',
+    'semrushbot',
+    'siteauditbot',
+    'splitsignalbot',
+    'gptbot',
+    'oai-searchbot',
+    'chatgpt-user',
+    'perplexitybot',
+    'better uptime bot',
+    'sentryuptimebot',
+    'uptimerobot',
+    'headlesschrome',
+    'cypress',
+    'google-hoteladsverifier',
+    'adsbot-google',
+    'apis-google',
+    'duplexweb-google',
+    'feedfetcher-google',
+    'google favicon',
+    'google web preview',
+    'google-read-aloud',
+    'googlebot',
+    'googleother',
+    'google-cloudvertexbot',
+    'googleweblight',
+    'mediapartners-google',
+    'storebot-google',
+    'google-inspectiontool',
+    'bytespider'
+];
+const isBlockedUA = function(ua, customBlockedUserAgents = []) {
+    if (!ua) return false;
+    const uaLower = ua.toLowerCase();
+    return DEFAULT_BLOCKED_UA_STRS.concat(customBlockedUserAgents).some((blockedUA)=>{
+        const blockedUaLower = blockedUA.toLowerCase();
+        return -1 !== uaLower.indexOf(blockedUaLower);
+    });
+};
+export { DEFAULT_BLOCKED_UA_STRS, isBlockedUA };

package/dist/utils/index.d.ts

@@ -1,4 +1,5 @@
 import { FetchLike } from '../types';
+export * from './bot-detection';
 export * from './bucketed-rate-limiter';
 export * from './number-utils';
 export * from './string-utils';

package/dist/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEpC,cAAc,yBAAyB,CAAA;AACvC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAE/B,eAAO,MAAM,aAAa,SAAS,CAAA;AAEnC,wBAAgB,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAI9D;AASD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAA;CACtC;AAED,wBAAsB,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC,CAqB5F;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,CAOnE;AAGD,eAAO,MAAM,SAAS,GAAI,KAAK,GAAG,KAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAEtD,CAAA;AAED,eAAO,MAAM,OAAO,GAAI,GAAG,OAAO,KAAG,CAAC,IAAI,KAEzC,CAAA;AAED,wBAAgB,QAAQ,IAAI,SAAS,GAAG,SAAS,CAEhD;AAED,wBAAgB,UAAU,CAAC,CAAC,EAC1B,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,GAC1C,OAAO,CAAC,CAAC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAE,CAAC,EAAE,CAAC,CAStF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEpC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,yBAAyB,CAAA;AACvC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAE/B,eAAO,MAAM,aAAa,SAAS,CAAA;AAEnC,wBAAgB,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAI9D;AASD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAA;CACtC;AAED,wBAAsB,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC,CAqB5F;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,CAOnE;AAGD,eAAO,MAAM,SAAS,GAAI,KAAK,GAAG,KAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAEtD,CAAA;AAED,eAAO,MAAM,OAAO,GAAI,GAAG,OAAO,KAAG,CAAC,IAAI,KAEzC,CAAA;AAED,wBAAgB,QAAQ,IAAI,SAAS,GAAG,SAAS,CAEhD;AAED,wBAAgB,UAAU,CAAC,CAAC,EAC1B,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,GAC1C,OAAO,CAAC,CAAC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAE,CAAC,EAAE,CAAC,CAStF"}

package/dist/utils/index.js

@@ -1,5 +1,8 @@
 "use strict";
 var __webpack_modules__ = {
+    "./bot-detection": function(module) {
+        module.exports = require("./bot-detection.js");
+    },
     "./bucketed-rate-limiter": function(module) {
         module.exports = require("./bucketed-rate-limiter.js");
     },
@@ -72,9 +75,28 @@ var __webpack_exports__ = {};
         retriable: ()=>retriable,
         safeSetTimeout: ()=>safeSetTimeout
     });
-    var _bucketed_rate_limiter__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__("./bucketed-rate-limiter");
+    var _bot_detection__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__("./bot-detection");
+    var __WEBPACK_REEXPORT_OBJECT__ = {};
+    for(var __WEBPACK_IMPORT_KEY__ in _bot_detection__WEBPACK_IMPORTED_MODULE_0__)if ([
+        "removeTrailingSlash",
+        "retriable",
+        "default",
+        "currentISOTime",
+        "currentTimestamp",
+        "STRING_FORMAT",
+        "isError",
+        "safeSetTimeout",
+        "getFetch",
+        "isPromise",
+        "assert",
+        "allSettled"
+    ].indexOf(__WEBPACK_IMPORT_KEY__) < 0) __WEBPACK_REEXPORT_OBJECT__[__WEBPACK_IMPORT_KEY__] = (function(key) {
+        return _bot_detection__WEBPACK_IMPORTED_MODULE_0__[key];
+    }).bind(0, __WEBPACK_IMPORT_KEY__);
+    __webpack_require__.d(__webpack_exports__, __WEBPACK_REEXPORT_OBJECT__);
+    var _bucketed_rate_limiter__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__("./bucketed-rate-limiter");
     var __WEBPACK_REEXPORT_OBJECT__ = {};
-    for(var __WEBPACK_IMPORT_KEY__ in _bucketed_rate_limiter__WEBPACK_IMPORTED_MODULE_0__)if ([
+    for(var __WEBPACK_IMPORT_KEY__ in _bucketed_rate_limiter__WEBPACK_IMPORTED_MODULE_1__)if ([
         "removeTrailingSlash",
         "retriable",
         "default",
@@ -88,12 +110,12 @@ var __webpack_exports__ = {};
         "assert",
         "allSettled"
     ].indexOf(__WEBPACK_IMPORT_KEY__) < 0) __WEBPACK_REEXPORT_OBJECT__[__WEBPACK_IMPORT_KEY__] = (function(key) {
-        return _bucketed_rate_limiter__WEBPACK_IMPORTED_MODULE_0__[key];
+        return _bucketed_rate_limiter__WEBPACK_IMPORTED_MODULE_1__[key];
     }).bind(0, __WEBPACK_IMPORT_KEY__);
     __webpack_require__.d(__webpack_exports__, __WEBPACK_REEXPORT_OBJECT__);
-    var _number_utils__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__("./number-utils");
+    var _number_utils__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__("./number-utils");
     var __WEBPACK_REEXPORT_OBJECT__ = {};
-    for(var __WEBPACK_IMPORT_KEY__ in _number_utils__WEBPACK_IMPORTED_MODULE_1__)if ([
+    for(var __WEBPACK_IMPORT_KEY__ in _number_utils__WEBPACK_IMPORTED_MODULE_2__)if ([
         "removeTrailingSlash",
         "retriable",
         "default",
@@ -107,12 +129,12 @@ var __webpack_exports__ = {};
         "assert",
         "allSettled"
     ].indexOf(__WEBPACK_IMPORT_KEY__) < 0) __WEBPACK_REEXPORT_OBJECT__[__WEBPACK_IMPORT_KEY__] = (function(key) {
-        return _number_utils__WEBPACK_IMPORTED_MODULE_1__[key];
+        return _number_utils__WEBPACK_IMPORTED_MODULE_2__[key];
     }).bind(0, __WEBPACK_IMPORT_KEY__);
     __webpack_require__.d(__webpack_exports__, __WEBPACK_REEXPORT_OBJECT__);
-    var _string_utils__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__("./string-utils");
+    var _string_utils__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__("./string-utils");
     var __WEBPACK_REEXPORT_OBJECT__ = {};
-    for(var __WEBPACK_IMPORT_KEY__ in _string_utils__WEBPACK_IMPORTED_MODULE_2__)if ([
+    for(var __WEBPACK_IMPORT_KEY__ in _string_utils__WEBPACK_IMPORTED_MODULE_3__)if ([
         "removeTrailingSlash",
         "retriable",
         "default",
@@ -126,12 +148,12 @@ var __webpack_exports__ = {};
         "assert",
         "allSettled"
     ].indexOf(__WEBPACK_IMPORT_KEY__) < 0) __WEBPACK_REEXPORT_OBJECT__[__WEBPACK_IMPORT_KEY__] = (function(key) {
-        return _string_utils__WEBPACK_IMPORTED_MODULE_2__[key];
+        return _string_utils__WEBPACK_IMPORTED_MODULE_3__[key];
     }).bind(0, __WEBPACK_IMPORT_KEY__);
     __webpack_require__.d(__webpack_exports__, __WEBPACK_REEXPORT_OBJECT__);
-    var _type_utils__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__("./type-utils");
+    var _type_utils__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__("./type-utils");
     var __WEBPACK_REEXPORT_OBJECT__ = {};
-    for(var __WEBPACK_IMPORT_KEY__ in _type_utils__WEBPACK_IMPORTED_MODULE_3__)if ([
+    for(var __WEBPACK_IMPORT_KEY__ in _type_utils__WEBPACK_IMPORTED_MODULE_4__)if ([
         "removeTrailingSlash",
         "retriable",
         "default",
@@ -145,12 +167,12 @@ var __webpack_exports__ = {};
         "assert",
         "allSettled"
     ].indexOf(__WEBPACK_IMPORT_KEY__) < 0) __WEBPACK_REEXPORT_OBJECT__[__WEBPACK_IMPORT_KEY__] = (function(key) {
-        return _type_utils__WEBPACK_IMPORTED_MODULE_3__[key];
+        return _type_utils__WEBPACK_IMPORTED_MODULE_4__[key];
     }).bind(0, __WEBPACK_IMPORT_KEY__);
     __webpack_require__.d(__webpack_exports__, __WEBPACK_REEXPORT_OBJECT__);
-    var _promise_queue__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__("./promise-queue");
+    var _promise_queue__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__("./promise-queue");
     var __WEBPACK_REEXPORT_OBJECT__ = {};
-    for(var __WEBPACK_IMPORT_KEY__ in _promise_queue__WEBPACK_IMPORTED_MODULE_4__)if ([
+    for(var __WEBPACK_IMPORT_KEY__ in _promise_queue__WEBPACK_IMPORTED_MODULE_5__)if ([
         "removeTrailingSlash",
         "retriable",
         "default",
@@ -164,7 +186,7 @@ var __webpack_exports__ = {};
         "assert",
         "allSettled"
     ].indexOf(__WEBPACK_IMPORT_KEY__) < 0) __WEBPACK_REEXPORT_OBJECT__[__WEBPACK_IMPORT_KEY__] = (function(key) {
-        return _promise_queue__WEBPACK_IMPORTED_MODULE_4__[key];
+        return _promise_queue__WEBPACK_IMPORTED_MODULE_5__[key];
     }).bind(0, __WEBPACK_IMPORT_KEY__);
     __webpack_require__.d(__webpack_exports__, __WEBPACK_REEXPORT_OBJECT__);
     const STRING_FORMAT = 'utf8';

package/dist/utils/index.mjs

@@ -1,3 +1,4 @@
+export * from "./bot-detection.mjs";
 export * from "./bucketed-rate-limiter.mjs";
 export * from "./number-utils.mjs";
 export * from "./string-utils.mjs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@posthog/core",
-  "version": "1.4.0",
+  "version": "1.5.1",
   "license": "MIT",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -49,9 +49,13 @@
   },
   "devDependencies": {
     "@rslib/core": "^0.10.5",
+    "@types/cross-spawn": "^6.0.6",
     "jest": "^29.7.0",
     "@posthog-tooling/tsconfig-base": "1.0.0"
   },
+  "dependencies": {
+    "cross-spawn": "^7.0.6"
+  },
   "scripts": {
     "clean": "rimraf dist",
     "lint": "eslint src",

package/src/process/spawn-local.ts

@@ -1,4 +1,4 @@
-import { spawn } from 'node:child_process'
+import { spawn } from 'cross-spawn'
 import { resolveBinaryPath } from './utils'
 
 export async function spawnLocal(
@@ -10,13 +10,13 @@ export async function spawnLocal(
     // We start traversing the file system tree from this directory and we go up until we find the binary
     resolveFrom: string
     cwd: string
-    onBinaryFound: (binaryLocation: string) => void
+    onBinaryFound?: (binaryLocation: string) => void
   }
 ): Promise<void> {
   let binaryLocation
   try {
     binaryLocation = resolveBinaryPath(options.env.PATH ?? '', options.resolveFrom, binaryName)
-    options.onBinaryFound(binaryLocation)
+    options.onBinaryFound?.(binaryLocation)
   } catch (e) {
     console.error(e)
     throw new Error(
@@ -25,7 +25,6 @@ export async function spawnLocal(
   }
 
   const child = spawn(binaryLocation, [...args], {
-    shell: true,
     stdio: options?.stdio ?? 'inherit',
     env: options.env,
     cwd: options.cwd,

package/src/utils/bot-detection.ts

@@ -0,0 +1,114 @@
+// List of blocked user agent strings that identify bots
+// This is shared between browser and node SDKs to ensure consistent bot detection
+export const DEFAULT_BLOCKED_UA_STRS = [
+  // Random assortment of bots
+  'amazonbot',
+  'amazonproductbot',
+  'app.hypefactors.com', // Buck, but "buck" is too short to be safe to block (https://app.hypefactors.com/media-monitoring/about.htm)
+  'applebot',
+  'archive.org_bot',
+  'awariobot',
+  'backlinksextendedbot',
+  'baiduspider',
+  'bingbot',
+  'bingpreview',
+  'chrome-lighthouse',
+  'dataforseobot',
+  'deepscan',
+  'duckduckbot',
+  'facebookexternal',
+  'facebookcatalog',
+  'http://yandex.com/bots',
+  'hubspot',
+  'ia_archiver',
+  'leikibot',
+  'linkedinbot',
+  'meta-externalagent',
+  'mj12bot',
+  'msnbot',
+  'nessus',
+  'petalbot',
+  'pinterest',
+  'prerender',
+  'rogerbot',
+  'screaming frog',
+  'sebot-wa',
+  'sitebulb',
+  'slackbot',
+  'slurp',
+  'trendictionbot',
+  'turnitin',
+  'twitterbot',
+  'vercel-screenshot',
+  'vercelbot',
+  'yahoo! slurp',
+  'yandexbot',
+  'zoombot',
+
+  // Bot-like words, maybe we should block `bot` entirely?
+  'bot.htm',
+  'bot.php',
+  '(bot;',
+  'bot/',
+  'crawler',
+
+  // Ahrefs: https://ahrefs.com/seo/glossary/ahrefsbot
+  'ahrefsbot',
+  'ahrefssiteaudit',
+
+  // Semrush bots: https://www.semrush.com/bot/
+  'semrushbot',
+  'siteauditbot',
+  'splitsignalbot',
+
+  // AI Crawlers
+  'gptbot',
+  'oai-searchbot',
+  'chatgpt-user',
+  'perplexitybot',
+
+  // Uptime-like stuff
+  'better uptime bot',
+  'sentryuptimebot',
+  'uptimerobot',
+
+  // headless browsers
+  'headlesschrome',
+  'cypress',
+  // we don't block electron here, as many customers use posthog-js in electron apps
+
+  // a whole bunch of goog-specific crawlers
+  // https://developers.google.com/search/docs/advanced/crawling/overview-google-crawlers
+  'google-hoteladsverifier',
+  'adsbot-google',
+  'apis-google',
+  'duplexweb-google',
+  'feedfetcher-google',
+  'google favicon',
+  'google web preview',
+  'google-read-aloud',
+  'googlebot',
+  'googleother',
+  'google-cloudvertexbot',
+  'googleweblight',
+  'mediapartners-google',
+  'storebot-google',
+  'google-inspectiontool',
+  'bytespider',
+]
+
+/**
+ * Block various web spiders from executing our JS and sending false capturing data
+ */
+export const isBlockedUA = function (ua: string | undefined, customBlockedUserAgents: string[] = []): boolean {
+  if (!ua) {
+    return false
+  }
+
+  const uaLower = ua.toLowerCase()
+  return DEFAULT_BLOCKED_UA_STRS.concat(customBlockedUserAgents).some((blockedUA) => {
+    const blockedUaLower = blockedUA.toLowerCase()
+    // can't use includes because IE 11 :/
+    return uaLower.indexOf(blockedUaLower) !== -1
+  })
+}

package/src/utils/index.ts

@@ -1,5 +1,6 @@
 import { FetchLike } from '../types'
 
+export * from './bot-detection'
 export * from './bucketed-rate-limiter'
 export * from './number-utils'
 export * from './string-utils'