Browser Asset Audit

For browser-delivered JavaScript or CSS, inspect the complete generated output for:

• CSP requirements and dynamic code execution;
• injected markup, scripts, or styles;
• network destinations and runtime loading;
• external URLs, source maps, and runtime fetches;
• bundled code or notices absent from upstream top-level metadata.

Every destination and executable behavior must be attributable to the selected upstream release. Resolve or report suspicious content before completion.