fix: block bots more aggressively

app/entry.server.tsx

@@ -6,7 +6,7 @@
 import type { AppLoadContext, EntryContext } from '@remix-run/node'
 import { createReadableStreamFromReadable } from '@remix-run/node'
 import { RemixServer } from '@remix-run/react'
-import { detect } from 'detect-browser'
+import { isbot } from 'isbot'
 import { PassThrough } from 'node:stream'
 import { renderToPipeableStream } from 'react-dom/server'
 
@@ -19,11 +19,7 @@ export default function handleRequest(
   remixContext: EntryContext,
   _loadContext: AppLoadContext,
 ) {
-  const isbot =
-    detect(request.headers.get('user-agent') ?? '')?.type?.startsWith('bot') ??
-    false
-
-  return isbot
+  return isbot(request.headers.get('user-agent'))
     ? handleBotRequest(
         request,
         responseStatusCode,

app/lib/responses.server.ts

@@ -1,5 +1,5 @@
 import { HeadersFunction, json } from '@remix-run/node'
-import { detect } from 'detect-browser'
+import { isbot } from 'isbot'
 import omit from 'lodash/omit'
 import type { Logger } from 'winston'
 import type { ZodIssue } from 'zod'
@@ -118,9 +118,7 @@ export function blockBots(request: Request) {
     })
   }
 
-  const detected = detect(userAgent)
-
-  if (detected && detected.type.startsWith('bot')) {
+  if (isbot(userAgent)) {
     throw forbidden({
       error: 'Bots are not allowed to access this resource.',
     })

package.json

@@ -45,6 +45,7 @@
     "date-fns": "^3.6.0",
     "detect-browser": "^5.3.0",
     "drizzle-orm": "^0.31.2",
+    "isbot": "^5.1.14",
     "lodash": "^4.17.21",
     "morgan": "^1.10.0",
     "react": "^18.2.0",