If there were only a way to pin external deps loaded from html by sha…
That's not much help if you don't vet all third-party dependencies closely, ideally at the source level pre obfuscation/minification.
That's not much help if you don't vet all third-party dependencies closely, ideally at the source level pre obfuscation/minification.