4 ms·The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party Libraries1 points by joeyespo 9y ago