I think this is why integrity hashes should be included anytime a CDN is used to load a third-party library. Bootstrap does this, for example: <a href="http:&#x2F;&#x2F;getbootstrap.com&#x2F;getting-started&#x2F;" rel="nofollow">http:&#x2F;&#x2F;getbootstrap.com&#x2F;getting-started&#x2F;</a><p>I&#x27;d like to see more lib providers, and even CDNs themselves, follow suit.