-
Notifications
You must be signed in to change notification settings - Fork 141
Open
Labels
Description
To help establish a consistent and, more importantly, a trusted process to minify the static/js
contents, this should be 100% automated in a public way. My initial thought would be to use a GitHub Action that auto-minifies and commits when any of the static/js/*.js
files change.
When looking at my contribution to [bootstrap5.modal.forms.js](https://github.com/trco/django-bootstrap-modal-forms/blob/master/bootstrap_modal_forms/static/js/bootstrap5.modal.forms.js)
, I realized I could have put something malicious in, minified it, and there would have been no way for the community to verify the contents of that commit.