{"repo":"w3c/webappsec-subresource-integrity","summary":{"retrieved":"2026-05-16T07:47:49Z","triageViolations":13,"urgentViolations":0,"soonViolations":0,"agendaViolations":0,"needsEditsViolations":0,"needTriage":0,"urgent":0,"soon":0,"agenda":0,"needsEdits":0,"other":29},"triage":[{"number":57,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/57","title":"Applying SRI to HTTP ranges","author":"darobin","createdAt":"2016-10-04T20:48:59Z","labels":["feature-request"],"sloTimeUsed":"P3510DT10H58M50S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true},{"number":107,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/107","title":"Only recommending collision resistance","author":"martinthomson","createdAt":"2021-09-14T05:56:04Z","labels":[],"sloTimeUsed":"P1705DT1H51M45S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":116,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/116","title":"Define equality comparator for metadata","author":"noamr","createdAt":"2022-05-03T10:03:19Z","labels":[],"sloTimeUsed":"P1473DT21H44M30S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":121,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/121","title":"base64-related requirements are broken","author":"annevk","createdAt":"2023-04-21T15:11:56Z","labels":[],"sloTimeUsed":"P1120DT16H35M53S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":124,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/124","title":"Normative references to discontinued specs in Subresource Integrity","author":"dontcallmedom-bot","createdAt":"2024-08-28T12:20:53Z","labels":[],"sloTimeUsed":"P625DT19H26M56S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":154,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/154","title":"current bytesMatch algorithm ineffective and in worst case scenario sec. vuln.","author":"Uzlopak","createdAt":"2025-08-18T15:57:05Z","labels":[],"sloTimeUsed":"P270DT15H50M44S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":156,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/156","title":"Integrity-Policy gaps for WAICT","author":"ezzak","createdAt":"2025-10-29T17:50:51Z","labels":["waict"],"sloTimeUsed":"P198DT13H56M58S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true},{"number":159,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/159","title":"WAICT enforcement modes","author":"ezzak","createdAt":"2025-10-29T17:54:09Z","labels":["waict"],"sloTimeUsed":"P198DT13H53M40S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true},{"number":160,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/160","title":"Inline Manifest","author":"ezzak","createdAt":"2025-10-29T17:54:53Z","labels":["waict"],"sloTimeUsed":"P198DT13H52M56S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true},{"number":161,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/161","title":"Multiple Manifests","author":"ezzak","createdAt":"2025-10-29T17:56:40Z","labels":["waict"],"sloTimeUsed":"P198DT13H51M9S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true},{"number":164,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/164","title":"Proposed covered resource types","author":"ezzak","createdAt":"2025-10-29T18:03:10Z","labels":["waict"],"sloTimeUsed":"P198DT13H44M39S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true},{"number":165,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/165","title":"Integrity for source maps","author":"mozfreddyb","createdAt":"2025-10-30T08:41:36Z","labels":["feature-request"],"sloTimeUsed":"P197DT23H6M13S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":1,"numLabels":1},"outOfSlo":true},{"number":167,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/167","title":"Clarify interaction between WAICT integrity and DOM-modifying code/plugins","author":"rozbb","createdAt":"2025-11-14T20:43:19Z","labels":["waict"],"sloTimeUsed":"P182DT11H4M30S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true}],"urgent":[],"soon":[],"agenda":[],"needsEdits":[],"other":[{"number":11,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/11","title":"SHA-3/Keccak","author":"smarts","createdAt":"2015-10-28T04:05:45Z","labels":["feature-request"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":9,"numLabels":1}},{"number":20,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/20","title":"Consider integrity check violation reporting","author":"shekyan","createdAt":"2015-12-14T06:09:15Z","labels":["feature-request"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":45,"numLabels":1}},{"number":21,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/21","title":"Consider integrity enforcement of iframe","author":"shekyan","createdAt":"2015-12-14T06:20:06Z","labels":["feature-request"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":24,"numLabels":1}},{"number":40,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/40","title":"Checking the integrity of resources pulled in from within CSS stylesheets","author":"baloo","createdAt":"2016-05-31T01:03:59Z","labels":["feature-request"],"milestone":{"url":"https://github.com/w3c/webappsec-subresource-integrity/milestone/2","title":"v2"},"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numLabels":1}},{"number":44,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/44","title":"Extend SRI to support integrity metadata on inline script/style blocks","author":"shekyan","createdAt":"2016-06-22T05:45:44Z","labels":["feature-request"],"milestone":{"url":"https://github.com/w3c/webappsec-subresource-integrity/milestone/2","title":"v2"},"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numLabels":1}},{"number":60,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/60","title":"Require that proxies do not modify integrity checked assets","author":"ScottHelme","createdAt":"2016-10-31T22:23:15Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":11,"numLabels":0}},{"number":68,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/68","title":"integrity for downloads","author":"dveditz","createdAt":"2017-03-25T16:44:52Z","labels":["SRI-next","feature-request"],"milestone":{"url":"https://github.com/w3c/webappsec-subresource-integrity/milestone/2","title":"v2"},"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numLabels":2}},{"number":77,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/77","title":"A new IntegrityCheckFailure event","author":"ScottHelme","createdAt":"2018-03-05T09:00:35Z","labels":["feature-request"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":8,"numLabels":1}},{"number":79,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/79","title":"Is it possible to do SRI on importScripts in JS?","createdAt":"2018-07-15T15:44:58Z","labels":["feature-request"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":3,"numLabels":1}},{"number":84,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/84","title":"The algorithm for parsing metadata should be described in more detail","author":"baek9","createdAt":"2019-12-10T15:20:33Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":12,"numLabels":0}},{"number":85,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/85","title":"Consideration: Allow integrity-check based on signature instead of actual hash","author":"NL-William","createdAt":"2019-12-15T09:43:33Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":3,"numLabels":0}},{"number":101,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/101","title":"Explicitly encourage user agents to validate cache content via integrity attributes","author":"crisperdue","createdAt":"2021-06-02T22:27:07Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":7,"numLabels":0}},{"number":102,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/102","title":"Add recommendation to use SRI for versioned & stable resources","author":"mozfreddyb","createdAt":"2021-07-16T11:21:42Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":8,"numLabels":0}},{"number":104,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/104","title":"Add support for BLAKE hashes in subresource integrity","author":"abitrolly","createdAt":"2021-08-23T05:07:28Z","labels":["feature-request"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":6,"numLabels":1}},{"number":105,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/105","title":"Explain `crossorigin`","author":"abitrolly","createdAt":"2021-09-01T09:07:03Z","labels":["enhancement"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":12,"numLabels":1}},{"number":113,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/113","title":"Apply subresource integrity to <img> tags","author":"mlissner","createdAt":"2022-04-18T22:14:05Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":115,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/115","title":"Be more specific about \"most collision-resistant\"","author":"noamr","createdAt":"2022-05-03T10:01:28Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":2,"numLabels":0}},{"number":123,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/123","title":"Idea: Add Integrity Request Header ","author":"tetsuyainfra","createdAt":"2024-06-29T11:34:03Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":155,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/155","title":"Integrity check should be strict and throw by default","author":"LiviaMedeiros","createdAt":"2025-09-04T15:50:22Z","labels":["question"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":6,"numLabels":1}},{"number":157,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/157","title":"Script coverage is non-exhaustive","author":"ezzak","createdAt":"2025-10-29T17:51:57Z","labels":["waict"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":6,"numLabels":1}},{"number":158,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/158","title":"Supporting WAICT Manifest in Integrity-Policy","author":"ezzak","createdAt":"2025-10-29T17:53:28Z","labels":["waict"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":3,"numLabels":1}},{"number":162,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/162","title":"Manifest Hashes Format","author":"ezzak","createdAt":"2025-10-29T17:58:22Z","labels":["waict"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":6,"numLabels":1}},{"number":163,"url":"https://github.com/w3c/webappsec-subresource-integrity/issues/163","title":"Support for multiple resources per Hash (Multiple resources in a JS file)","author":"ezzak","createdAt":"2025-10-29T18:02:48Z","labels":["waict"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":1,"numLabels":1}},{"number":86,"url":"https://github.com/w3c/webappsec-subresource-integrity/pull/86","title":"Apply integrity checks to inline script and style blocks.","author":"mikewest","createdAt":"2019-12-16T11:48:04Z","pull_request":{"draft":false},"labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":25,"numComments":25,"numLabels":0}},{"number":103,"url":"https://github.com/w3c/webappsec-subresource-integrity/pull/103","title":"Add some information for authors about the intent of the spec","author":"robinwhittleton","createdAt":"2021-07-16T19:24:13Z","pull_request":{"draft":false},"labels":["enhancement"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":32,"numComments":32,"numLabels":1}},{"number":112,"url":"https://github.com/w3c/webappsec-subresource-integrity/pull/112","title":"Update references and clarify section 3.5 in the current version of the spec","author":"baek9","createdAt":"2022-01-25T03:21:35Z","pull_request":{"draft":false},"labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":15,"numComments":15,"numLabels":0}},{"number":122,"url":"https://github.com/w3c/webappsec-subresource-integrity/pull/122","title":"Define SRI Reports to inform site operators of integrity check failures","author":"ScottHelme","createdAt":"2023-04-25T11:57:18Z","pull_request":{"draft":false},"labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":8,"numComments":8,"numLabels":0}},{"number":150,"url":"https://github.com/w3c/webappsec-subresource-integrity/pull/150","title":"avoid strict splitting in parseMetada to allow base64url","author":"Uzlopak","createdAt":"2025-07-09T13:53:48Z","pull_request":{"draft":false},"labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":4,"numComments":4,"numLabels":0}},{"number":151,"url":"https://github.com/w3c/webappsec-subresource-integrity/pull/151","title":"reduce complexity of get strongest metadata","author":"Uzlopak","createdAt":"2025-07-09T14:37:23Z","pull_request":{"draft":false},"labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":12,"numComments":12,"numLabels":0}}]}