feat: add @scarf/scarf install analytics

README.md

@@ -20,6 +20,24 @@ npm install --save @dapr/dapr-dev
 
 Visit [https://docs.dapr.io/developing-applications/sdks/js/](https://docs.dapr.io/developing-applications/sdks/js/) to view the full documentation.
 
+## Installation Analytics
+
+`@dapr/dapr` includes [`@scarf/scarf`](https://github.com/scarf-sh/scarf-js), which reports basic, anonymized install information (operating system, package name and version) to help Dapr maintainers understand SDK adoption. It only runs at install time — there is no runtime footprint and no data collection after installation. Scarf uses the request IP for company-level aggregation and does not store it.
+
+To opt out, set either environment variable before installing:
+
+```bash
+export SCARF_ANALYTICS=false
+# or
+export DO_NOT_TRACK=1
+```
+
+or add the following to your project's `package.json`:
+
+```json
+"scarfSettings": { "enabled": false }
+```
+
 ## Community
 
 There are multiple ways to get involved with the SDK community, please see [wiki/Community-engagement](https://github.com/dapr/js-sdk/wiki/Community-engagement) for more information.

package.json

@@ -54,6 +54,10 @@
   "keywords": [],
   "author": "Dapr Authors",
   "license": "apache-2.0",
+  "scarfSettings": {
+    "defaultOptIn": true,
+    "allowTopLevel": false
+  },
   "dependencies": {
     "@bufbuild/protobuf": "^2.9.0",
     "@connectrpc/connect": "^2.1.0",
@@ -62,6 +66,7 @@
     "@dapr/durabletask-js": "^1.0.0",
     "@grpc/grpc-js": "^1.12.5",
     "@js-temporal/polyfill": "^0.3.0",
+    "@scarf/scarf": "^1.4.0",
     "@types/google-protobuf": "^3.15.5",
     "@types/node-fetch": "^2.6.2",
     "body-parser": "^1.19.0",