Svelte SRI plugin

In the future, this repository will be archived or maybe deleted and migrated to the following repository, which is accessible through the jsr.io package registry.

Adds subresource integrity hashes to script and stylesheet imports from your index.html file at build time.

Before

After

Usage

1. npm i --save-dev vite-plugin-subresource-integrity
2. import subresourceIntegrity from "vite-plugin-subresource-integrity";
3. In your vite.config.js file:

import { defineConfig } from 'vite'
import subresourceIntegrity from 'vite-plugin-subresource-integrity'

export default defineConfig({
  // …
  plugins: [subresourceIntegrity()]
})

Tested in

Framework	Version
vanilla(v5.1.6)
vue(v3.3.4)
react(v18.2.0)
preact(v10.16.0)
lit(v2.8.0)
svelte(v4.1.2)
solid(v1.7.9)
qwik(v1.2.6)

Alternatives

rollup-plugin-sri

@small-tech/vite-plugin-sri

References

Rollup - Build Hooks

Third Party JavaScript Management Cheat Sheet

Content Security Policy Cheat Sheet

Ship ESM & CJS in one Package

Repositories

Fork of @small-tech/vite-plugin-sri that uses typescript

gatsby-plugin-sri

vite-plugin-inspect

DefinitelyTyped

GitHub issues

How to execute a plugin after assets are fully generated?

Discord

How can I add Subresource Integrity(SRI) for Svelte/Svelte Kit after build

Contributing

Found a bug, have a suggestion for a new feature? Submit an issue.