No preprocessing of the <code class="language-text">package.json</code> should
be done. Subresource integrity strings can be produced by modules like
<a href="https://www.npmjs.com/package/ssri"><code class="language-text">ssri</code></a>.</p>
<h4 id="preservesymlinks" style="position:relative;"><a href="#preservesymlinks" aria-label="preservesymlinks permalink" class="header-link-class before"><svg aria-hidden="true" height="20" version="1.1" viewBox="0 0 16 16" width="20"><path fill-rule="evenodd" d="M4 9