remove scarf analytics

[mansona]

Hey folks 👋

I'm just opening up this PR to remove the @scarf/scarf analytics package from polished.

I don't want to get into too much of a philosophical conversation about analytics or ethics but I would say that the package is potentially a GDPR violation (as it does not work on an opt-in basis) and there are some serious problems with the implementation of scarf as it currently doesn't allow you opt-out if you are using yarn https://github.com/scarf-sh/scarf-js/issues/3

Cheers!

[codecov[bot]]

Codecov Report

:exclamation: No coverage uploaded for pull request base (version-4-1-1@99fb4a1). Click here to learn what that means. The diff coverage is n/a.

@@                Coverage Diff                @@
##             version-4-1-1      #567   +/-   ##
=================================================
  Coverage                 ?   100.00%           
=================================================
  Files                    ?        89           
  Lines                    ?       846           
  Branches                 ?       309           
=================================================
  Hits                     ?       846           
  Misses                   ?         0           
  Partials                 ?         0           

Flag	Coverage Δ
unittests	100.00% <0.00%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

---

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 99fb4a1...33de0fb. Read the comment docs.

[aviaviavi]

Hi @mansona, author of the Scarf package here. From the description for the PR, I just wanted to clarify a few points because it seems there may be some misunderstandings here. I described this a bit in another thread that I happened to see first (https://github.com/styled-components/polished/pull/559#issuecomment-780791004) but to summarize here:

• For yarn: Scarf disables itself entirely during yarn installs, so no analytics are reported at all. It is a firm development guideline for Scarf that analytics are never reported without informing the user, so the analytics hooks are never triggered in a yarn installation. I'll update our docs to better communicate that.
• No personally-identifiable information is being stored by Scarf, so the consent requirements of GDPR are not triggered here. Scarf offers various opt-out mechanisms on basic principle and for convenience, but not due to legal requirements.

cc @bhough

I hope you'll consider resuming the use of Scarf in this project, but either way, thanks for all of your open-source work and thanks for your time! :)