Of course it's third party code. I meant that it's not really third party in the context of this article advocating for a same origin policy for javascript. I

Of course it's third party code. I meant that it's not really third party in the context of this article advocating for a same origin policy for javascript. I only came across SRI while dealing with CSP, and I didn't quite understand why anyone would subject themselves to that until just now. Thanks for pointing it out.