posthog-js 1.436.1
https://registry.npmjs.org/posthog-js/-/posthog-js-1.436.1.tgz
sha512 (base64) of the archive: +uPcck+hcaBbjtxBwOtiiZ9BcBXyJmewumUMVP5MrIZO36BHHZ+SzvHTxFsA5soNbPo2fuLppsWfpNnuSjbNeA==
sha256 of the unchanged dist/module.slim.no-external.js: bdada97de35a4e7882fc6bfb895ca8470240030c061cad72a80826d8c9297ab3
Source code: https://github.com/PostHog/posthog-js (tag posthog-js@1.436.1)

posthog.slim.no-external.js is that file with one change, made by scripts/vendor_posthog.mjs:
every use of localStorage, sessionStorage and document.cookie is replaced by an object that stores
nothing (__TR_NO_STORE, defined in the file's first lines), and the source-map comment is removed.

web-vitals.js is dist/web-vitals.js of the same archive (sha256 of the unchanged file: 3c6ab8a4e21f4d7c63d523109e480930845952e816dd27d4a0bbf215865f107e),
without its source-map comment. It holds Google's web-vitals 6.2.1 (https://github.com/GoogleChrome/web-vitals, Apache-2.0:
LICENSE-web-vitals, from https://registry.npmjs.org/web-vitals/-/web-vitals-6.2.1.tgz,
sha512 (base64) rLcLXA2sx6+9dE88NHFubwTtGxpK4yYBLj6qHPdFoCaLr0cXGb4efOqtKLlm4loGA4OEKHIQKMKzZkKyOh5ctw==). It measures how fast a page loads and answers; it sends and stores nothing.

To rebuild: node scripts/vendor_posthog.mjs