On the topic of #FOSS? Is there an addon that attempts to check javascript on pages against scripts that might be in #git repositories and based on #softwareLicence?

There is the #integrityChecking attribute in #HTML which is good for some situations, but we've not ever seen any #licenceAttribute used specifically for javascript.

Thinking of avenues for allowing #javascript in very specific circumstances such as whether, #GPL and matches a pre-approved repo.

Maybe this problem is too hard?