Comment by amluto

As a little public resource announcement:

    <script type="module" blocking="render"
    src="https://cdn.jsdelivr.net/npm/[email protected]/dist/auto.js"
    ></script>

Users of something like this should ALWAYS use subresource integrity, and the example script tag should, too.