highlightjs / highlightjs/highlight.js
Tag built version with SRI hash
Open
docs/website
help welcome
package/build
- Dominant language
- JavaScript
- Stars
- 25k
- Forks
- 3.8k
- Avg merge
- 11h 35m
- Merged PRs (30d)
- 3
Description
The release does not include a JavaScript version.
Also, the recommended install instructions is to load from CDN using jsDelivr or other without SRI.
Best practice is to use SRI which prevents supply-chain attacks. This would allow to use SRI when including the file from CDN.
Contributor guide
Assessment
This issue has not been assessed yet.