Shipping support for module script integrity in Chrome & Safari - Shopify
Aug 2, 2024

Summary
Shopify engineers collaborated with browser vendors to integrate Subresource Integrity (SRI) metadata into import maps, enabling integrity verification for imported JavaScript modules. This involved developing a working implementation in Chromium, contributing to the HTML specification, and implementing the feature in WebKit. The solution allows for dynamic imports (`import()`) to be securely verified via hashes mapped in import maps, addressing a critical capability gap in SRI that previously prevented its use with modules.