Inter is widely used in security-sensitive web applications. rsms.me/inter/inter.css
is currently unversioned and publishes no SRI hashes, making it impossible for
downstream projects to implement SRI without pinning to a frozen snapshot.
Request: either publish versioned URLs (e.g. /inter/v4.1/inter.css) with
corresponding SRI hashes, or document a recommended self-hosting path.
jsDelivr and cdnjs both publish SRI hashes alongside their hosted packages —
a similar approach here would unblock a lot of downstream security tooling.
Inter is widely used in security-sensitive web applications. rsms.me/inter/inter.css
is currently unversioned and publishes no SRI hashes, making it impossible for
downstream projects to implement SRI without pinning to a frozen snapshot.
Request: either publish versioned URLs (e.g. /inter/v4.1/inter.css) with
corresponding SRI hashes, or document a recommended self-hosting path.
jsDelivr and cdnjs both publish SRI hashes alongside their hosted packages —
a similar approach here would unblock a lot of downstream security tooling.