{"categories":[{"label":"Software Development","url":"https://skillfed.io/packages/category/software-development/15"},{"label":"WWW/HTTP","url":"https://skillfed.io/packages/category/internet-www-http/6"}],"enrichment":{"capability":"Generates Subresource Integrity (SRI) hashes for Django static files and outputs them in template tags and script/link elements to verify file integrity in the browser.","skillfed_tags":["security","static-files","django-extension"],"use_cases":["Add SRI verification to production Django sites to detect CDN or network-level tampering with static assets.","Integrate SRI into a Django app serving static files through WhiteNoise or similar middleware without manual hash management.","Generate SHA512 integrity hashes for high-security applications requiring stronger algorithms than the default SHA256.","Retrieve bare integrity values for use in custom script/link generation or Content Security Policy headers.","Support Jinja2 templates alongside Django templates using the sri.jinja2.sri extension for consistent SRI output."],"what_it_does":"django-sri is a Django app that automatically computes and injects Subresource Integrity (SRI) hashes into your static file references. It works through template tags that wrap Django's static file system, generating integrity attributes for script and link elements so browsers can verify that fetched resources haven't been tampered with. The package supports SHA256, SHA384, and SHA512 algorithms, caches hashes in Django's caching framework for performance, and integrates seamlessly with static file storage backends like WhiteNoise and manifest-based storage.\n\nYou install it, add it to INSTALLED_APPS, then use template tags like `{% sri_static \"index.js\" %}` instead of the standard static tag. It also provides a Python API for computing integrity hashes directly. By default, hashes are suppressed during local development (when DEBUG=True) to avoid churn as files change, but this is configurable.","worth_installing":"Yes. django-sri is actively maintained, has no known vulnerabilities, low install friction (Django only), and solves a real security need with a clean API. Use it if you serve static files in Django and want browser-level integrity verification without manual hash management."},"id":"django-sri","links":{"html":"https://skillfed.io/packages/django-sri","md":"https://skillfed.io/packages/django-sri.md","pypi":"https://pypi.org/project/django-sri/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2025-01-21","license_spdx":null,"license_treatment":"permissive","name":"django-sri","python_support":"supports_current","summary":"Subresource Integrity for Django"},"popularity":{"monthly_downloads":140075,"position":11278,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.8.0"}