SRI adds a cryptographic hash to every third-party script and stylesheet so the browser refuses to run modified files. Essential for any external JS or CSS you depend on.
Subresource Integrity (W3C Working Draft)
Subresource Integrity — §3.8 Integrity-Policy (W3C Editor's Draft)
OWASP — Third Party JavaScript Management Cheat Sheet