replace `./lib/utils/sha.js` with `sha`

closes #3381