@@ -0,0 +1,21 @@
+import hash from '../hash.mjs';
+
+describe('hash()', () => {
+	it('returns the expected value', () => {
+		expect(hash('foo')).toBe('rL0Y20zC-F');
+	});
+
+	it('returns a 10-character string', () => {
+		expect(hash('foo')).toHaveLength(10);
+		expect(hash('')).toHaveLength(10);
+		expect(hash('a very long string that exceeds normal length')).toHaveLength(10);
+	});
+
+	it('returns consistent results for the same input', () => {
+		expect(hash('foo')).toBe(hash('foo'));
+	});
+
+	it('returns different results for different inputs', () => {
+		expect(hash('foo')).not.toBe(hash('bar'));
+	});
+});
@@ -1,10 +1,14 @@
-import MurmurHash3 from 'imurmurhash';
+import { createHash } from 'node:crypto';
 
 /**
  * hash the given string
  * @param {string} str the string to hash
  * @returns {string} the hash
  */
 export default function hash(str) {
-	return MurmurHash3(str).result().toString(36);
+	// Why md5?
+	// - Fastest performance
+	// - Sufficient collision resistance for file paths and configurations
+	// - Not need cryptographic security
+	return createHash('md5').update(str).digest('base64url').slice(0, 10);
 }
@@ -146,7 +146,6 @@
     "html-tags": "^5.1.0",
     "ignore": "^7.0.5",
     "import-meta-resolve": "^4.2.0",
-    "imurmurhash": "^0.1.4",
     "is-plain-object": "^5.0.0",
     "mathml-tag-names": "^4.0.0",
     "meow": "^14.1.0",
@@ -173,7 +172,6 @@
     "@types/debug": "^4.1.12",
     "@types/global-modules": "^2.0.2",
     "@types/globjoin": "^0.1.2",
-    "@types/imurmurhash": "^0.1.4",
     "@types/micromatch": "^4.0.10",
     "@types/normalize-path": "^3.0.2",
     "@types/postcss-less": "^4.0.7",