Registry / auth-security / vite-plugin-subresource-integrity

vite-plugin-subresource-integrity

library0.0.12jsnpmunverified

Vite plugin that adds subresource integrity (SRI) hashes to script and stylesheet imports in index.html at build time. Version 0.0.12 is the latest, with an unknown release cadence. It is a TypeScript rewrite of @small-tech/vite-plugin-sri, offering native type definitions and support for multiple frameworks (Vue, React, Svelte, Solid, Qwik, Lit, Preact, vanilla). Key differentiators: lightweight, no runtime overhead, and simple configuration. Alternatives include rollup-plugin-sri and @small-tech/vite-plugin-sri.

auth-security http-networking

npm install vite-plugin-subresource-integrity

github ↗package ↗

INSTALL

IMPORT

SIG · VITE-PLUGIN-SUBRES

vite-plugin-subresource-integrity

auth-securityjavascriptv0.0.12

Install

—

Import

—

Disk

—

Pass rate

0/ 6

Env Coverage0 / 6

glibc

18–22

musl

18–22

Install & Compatibility

Where this runs

tested against v? · npm install

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

node 18–223 runs

build_error

glibc

node 18–223 runs

build_error

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

subresourceIntegrity

✓ import subresourceIntegrity from 'vite-plugin-subresource-integrity'

✗ const subresourceIntegrity = require('vite-plugin-subresource-integrity')

Default export. Only ESM supported; no CJS require.

default export

✓ import subresourceIntegrity from 'vite-plugin-subresource-integrity'

✗ import { subresourceIntegrity } from 'vite-plugin-subresource-integrity'

Not a named export; must use default import.

VitePluginSubresourceIntegrity

✓ import type { VitePluginSubresourceIntegrity } from 'vite-plugin-subresource-integrity'

Type import for TypeScript users.

Basic Vite configuration integrating the subresource integrity plugin.

// vite.config.js import { defineConfig } from 'vite'; import subresourceIntegrity from 'vite-plugin-subresource-integrity'; export default defineConfig({ plugins: [subresourceIntegrity()] });

Debug

Known issues

gotchaPlugin only works at build time, not in dev mode.

fix

No fix needed; SRI is only relevant for production builds.

affects: <=0.0.12

gotchaPlugin modifies index.html after build. If using custom HTML templates, ensure the plugin runs after other HTML transformers.

fix

Order plugins carefully: subresourceIntegrity() should be placed after HTML manipulation plugins.

affects: <=0.0.12

deprecatedThis plugin is a fork; original @small-tech/vite-plugin-sri is unmaintained.

fix

Continue using this plugin or switch to rollup-plugin-sri if needed.

affects: <=0.0.12

gotchaDoes not support dynamic imports or async chunks by default.

fix

Manually add integrity attributes in HTML for dynamic chunks or use a full rollup SRI plugin.

affects: <=0.0.12

Errors

Common errors & fixes

Error: Cannot find module 'vite-plugin-subresource-integrity'

Plugin not installed or incorrect import path.

fix

Run `npm i --save-dev vite-plugin-subresource-integrity` and ensure import using default import.

ReferenceError: require is not defined

Using require() in an ESM context.

fix

Replace `require()` with `import` statement.

TypeError: subresourceIntegrity is not a function

Using named import instead of default import.

fix

Use `import subresourceIntegrity from 'vite-plugin-subresource-integrity'`.

Upgrade

Version history

0.0.12latest on npm

Audit

Dependencies

No dependency data recorded yet.

Agent activity

33 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/JADSN1894/vite-plugin-sri ↗

packagehttps://www.npmjs.com/package/vite-plugin-subresource-integrity ↗