Script tag
Pin the version — the hash covers these exact bytes, so it only holds on a
pinned URL. crossorigin is required: without it the browser refuses the
request even when the hash is right.
<script
src="https://cdn.jsdelivr.net/npm/@coinfat/checkout@1.3.1/dist/coinfat.iife.js"
integrity="sha384-GaVlZMQb7K0CFyCVNpIL83EXi9yXFQbi4HYFfGgZm903VuzdSn4gBChPZamLHERz"
crossorigin="anonymous"></script>Prefer unpkg? Same file, same hash:
https://unpkg.com/@coinfat/checkout@1.3.1/dist/coinfat.iife.js
Full Changelog: v1.3.0...v1.3.1