Hash Checking

[trymeouteh]

To allow hashes to be added to importmaps for security to ensure scripts on CDN have not been tampered with by allowing the hash to be added after the URL being seperated by a space

{
  "imports": {
    "moment": "https://cdn.com/moment.js sha256=00000000",
    "lodash": "https://cdn.com/lodash.js sha512=0000000000000000"
  }
}

And also fallback URLs should be considered with hashing
#293 (comment)

[p-ob]

I believe Chromium is experimenting with this:

• https://github.com/guybedford/import-maps-extensions#integrity
• Importmap integrity w3ctag/design-reviews#944

[trymeouteh]

I believe Chromium is experimenting with this:

• https://github.com/guybedford/import-maps-extensions#integrity
• Importmap integrity w3ctag/design-reviews#944

That is an interesting way of going about it. Any word on Safari or Firefox adoption?