hongbo-miao / hongbomiao.com Goto Github PK

After changing from Netlify to Heroku, need update DNS.

https://yarnpkg.com/getting-started/install

Error: HTTP redirects to www firsthttp://hongbomiao.com (HTTP) should immediately redirect to https://hongbomiao.com (HTTPS) before adding the www subdomain. Right now, the first redirect is to https://www.hongbomiao.com/. The extra redirect is required to ensure that any browser which supports HSTS will record the HSTS entry for the top level domain, not just the subdomain.

Running yarn build will fail during CI for Lighthouse and Cypress after splitting .eslintrc.js
https://travis-ci.com/github/Hongbo-Miao/hongbomiao.com/builds/182345834

This is because

Only one .eslintignore file can be used at a time, so .eslintignore files other than the one in the current working directory will not be used.

microsoft/vscode-eslint#111
https://eslint.org/docs/user-guide/configuring#ignoring-files-and-directories

open-telemetry/opentelemetry-js-contrib#226

Dependabot can't resolve your JavaScript dependency files.

As a result, Dependabot couldn't update your dependencies.

The error Dependabot encountered was:

Error whilst updating @types/storybook__react in /yarn.lock:
Couldn't find package "storybook__react@*" required by "@types/[email protected]" on the "npm" registry.

If you think the above is an error on Dependabot's side please don't hesitate to get in touch - we'll do whatever we can to fix it.

https://github.com/graphql/dataloader

AVIF has landed: https://jakearchibald.com/2020/avif-has-landed/

Roughly speaking, at an acceptable quality, the WebP is almost half the size of JPEG, and AVIF is under half the size of WebP.

https://stackoverflow.com/questions/62081028/this-document-requires-trustedscripturl-assignment

facebook/create-react-app#9587

Based on v3.0.0 section at https://github.com/typescript-eslint/typescript-eslint/releases/tag/v3.0.0

https://github.com/nodeshift/opossum

https://github.com/Cherry/network-error-logging
https://github.com/Cherry/report-to

Migrate from Lighthouse Bot to Lighthouse CI.

Lighthouse Bot is deprecated.

https://github.com/clinicjs/node-clinic
https://github.com/mcollina/autocannon
https://github.com/davidmarkclements/0x

https://github.com/apollographql/graphql-tag

For logging libraries supporting transports, I feel I am just sold by this pino benchmark. https://github.com/pinojs/pino/blob/master/docs/benchmarks.md
And it supports async too!
It also supports redact, using fast-redact internally (fastest redact library I found, I was planning to use with existing winston actually)

For middleware level, pino-http, can reach 21496 req/sec, 25770.91 req/sec (extreme)

https://github.com/maticzav/graphql-shield

For GraphQL subscription WebSocket

1. Chrome 87.0.4280.0

• Succeed locally
• Succeed in production

2. Firefox 83.0a1

• Succeed locally
• Failed in production

Got

Firefox can’t establish a connection to the server at wss://www.hongbomiao.com/graphql.

periodically in production.

3. Safari 13.2

• Failed locally blocked by CSP
• Failed in production blocked by CSP

Refused to connect to wss://localhost:5000/graphql because it does not appear in the connect-src directive of the Content Security Policy.

'unsafe-inline' was added due to the PR #656 as a temp solution.
Need find a clean way and then remove it.

Dependabot can't resolve your JavaScript dependency files.

As a result, Dependabot couldn't update your dependencies.

The error Dependabot encountered was:

Error whilst updating @types/storybook__react in /yarn.lock:
Couldn't find package "storybook__react@*" required by "@types/[email protected]" on the "npm" registry.

If you think the above is an error on Dependabot's side please don't hesitate to get in touch - we'll do whatever we can to fix it.

View the update logs.

https://github.com/GoogleChrome/web-vitals

{"csp-report":{"blocked-uri":"blob","document-uri":"https://www.hongbomiao.com/","original-policy":"connect-src 'self' https://rs.fullstory.com https://r.lr-ingest.io https://o379185.ingest.sentry.io https://www.google-analytics.com https://stats.g.doubleclick.net https://ingest.lightstep.com; default-src 'none'; font-src 'self' data: https://fonts.gstatic.com; frame-src 'none'; img-src 'self' data: https://www.googletagmanager.com https://ssl.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'strict-dynamic' 'nonce-7HPWBf1V16RMYK+tpxLFlA==' 'self' https://static.cloudflareinsights.com https://edge.fullstory.com https://fullstory.com https://cdn.lr-ingest.io https://storage.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com; style-src 'self' https://tagmanager.google.com https://fonts.googleapis.com; worker-src 'self'; base-uri 'none'; sandbox allow-popups allow-same-origin allow-scripts; form-action 'none'; frame-ancestors 'none'; report-uri https://www.hongbomiao.com/api/violation/report-csp-violation; upgrade-insecure-requests","referrer":"","violated-directive":"worker-src"},"level":"warn","message":"reportCSPViolation","timestamp":"2020-09-18T14:19:57.613Z"}

Might be related with
facebook/create-react-app#9636
facebook/create-react-app#9637

Temporarily disabled service worker by #838

Dependabot can't resolve your JavaScript dependency files.

As a result, Dependabot couldn't update your dependencies.

The error Dependabot encountered was:

Error whilst updating @types/storybook__react in /yarn.lock:
Couldn't find package "storybook__react@*" required by "@types/[email protected]" on the "npm" registry.

If you think the above is an error on Dependabot's side please don't hesitate to get in touch - we'll do whatever we can to fix it.

https://github.com/facebook/create-react-app/blob/master/docusaurus/docs/making-a-progressive-web-app.md

Change hsts max-age back to 1 year.

Currently, there is a conflict:

1. https://hstspreload.org/?domain=hongbomiao.com requires max-age 1 year

2. Cloudflare recommends 6 months

Generate CSP script-src sha256

• Calculate sha256 of each <script>codes</script> in index.html.
• And also GTM's 'sha256-KYbqXqOYv6xOvzbfRwXslg+GK2ebpVi0G6EzAvF6Yc8='.

https://github.com/NodeRedis/node-redis

Although the website redirecting from https://hongbomiao.com to https://www.hongbomiao.com

However, when user open https://hongbomiao.com, sometimes favicon.ico and favicon.png will be blocked by CSP before redirecting.

https://sentry.io/organizations/hongbo-miao/issues/1898334335/events/c55ad162312c45f7a422b5c1357efa3a/?environment=production&project=5375232

https://sentry.io/organizations/hongbo-miao/issues/1898334335/events/014d3a6081c64d6fac35dafc005378df/?environment=production&project=5375232

Currently having some questions at https://stackoverflow.com/questions/64326800/how-to-parse-nel-network-error-logging-errors-reported-through-report-to-heade

Added initial version by #1033

https://github.com/facebook/react/tree/master/packages/eslint-plugin-react-hooks