• pnpm
• Hugo
• Font Awesome Pro auth token, stored in the FONTAWESOME_AUTH_TOKEN environment variable

The packageManager field in package.json pins the pnpm version; enable Corepack (corepack enable) once on your machine and it will auto-provision the right pnpm release on first use.

1. pnpm install
2. run hugo

• for production builds simply run pnpm build
• for local development run pnpm dev
• for local production tests pnpm serve

Due to supply chain attacks, brand-new dependency upgrades are held back until the set cooldown in pnpm-workspace.yaml elapses. For an urgent exemption, add the package to minimumReleaseAgeExclude.

Routine upgrades land via Dependabot PRs (see .github/dependabot.yml); don't run pnpm up --latest on develop or main — review the Dependabot PR or open a PR with explicit version pins.

To create subsets of font files, e.g. when we know only very few characters are required to render the title of the page "CRYPTOMATOR HUB":

1. First install pip install fonttools brotli
2. pyftsubset quicksand-bold.woff2 --text="CRYPTOMATOR HUB" --verbose --flavor=woff2 --output-file=quicksand-bold.reduced.woff2

Using WebP (for smaller images) or AVIF (for >80 kiB due to larger overhead) may yield in better compression. Here is a (rather old) comparison benchmark. However, we need to test the best format ourselves.

• brew install libavif (see GitHub Project Page for other installation methods)
  • Example (lossless): avifenc -l input.png output.avif
  • Example (lossy): avifenc --qcolor 70 --qalpha 100 --depth 8 input.png output.avif
• brew install libwebm
  • Example (lossless): cwebp -preset drawing -lossless -z 6 -metadata all input.png -o output.webp
  • Example (lossy): cwebp -preset drawing -q 90 -alpha_q 100 -metadata all input.png -o output.webp
• brew install optipng
  • Example: optipng -o3 image.png