Why doesn't the ArcGIS JS API CDN have an integrity value?

[JoeHeggenstaller]

This is probably a really noob question that I've wondered about for years, but have never been able to determine a solid answer. Why doesn't the ArcGIS JS API CDN have Subresource Integrity hash (SHA256, SHA384) and crossorigin values? Similar to other libraries like jQuery?

<script src="https://code.jquery.com/jquery-3.4.1.min.js" integrity="sha256-CSXorXvZcTkaix6Yvo6HppcZGetbYMGWSFlBw8HfCJo=" crossorigin="anonymous"></script>

Thanks.

[ChadCooper1]

@JuliePowell - could you help out here please? I've got the same question. Thanks.

[JuliePowell]

Hi Joe & Chad,

We don't advertise the hash because it may break when the CDN is patched. However, if you want to compute it, feel free to add it. If you have more questions about this, @DasaPaddock can help.

Julie

[JoeHeggenstaller]

Thanks Julie for the information. We'll check it out.