Rollup Plugin Sri
Rollup Plugin Sri is a plugin for the Rollup JavaScript module bundler that automatically generates Subresource Integrity (SRI) hashes for bundled assets. It calculates cryptographic hashes (like SHA-256, SHA-384, or SHA-512) for output files and injects them into HTML or other files as integrity attributes. This enhances security by ensuring that loaded resources haven't been tampered with, protecting against attacks like CDN compromise.
Developers should use this plugin when building web applications with Rollup that require strong security guarantees for static assets, such as in production deployments or compliance-sensitive environments. It's particularly useful for projects serving assets from third-party CDNs or where integrity validation is mandated by security policies, as it automates SRI generation without manual hash calculation.