[PROPOSAL] Provide a way to enforce integrity check on module imports

Bergi a.d.bergi at web.de
Sat Aug 1 17:33:40 UTC 2020


Hi,

> The problem with inlining the integrity into every import site is that this
> is naturally incompatible with import maps.

I don't see a problem with that. When using import maps, you should be
able to specifiy the integrity check in the import map, not needing it
in the module itself.
When not using import maps, specifying the integrity in the importing
module itself seems to give the best developer experience, following the
rationale of
https://github.com/tc39/proposal-import-assertions#why-not-out-of-band.
When using it in *both* places, then of course both integrity checks
would need to match, and an import map would be prevented from swapping
out the module under your hands.

kind regards,
 Bergi


More information about the es-discuss mailing list