Step 4 — Add webpack-subresource-integrity

[sampi]

If you don't feel secure enough, you can always add Subresource Integrity to your static assets.

This is how you can add webpack plugins, not only SRI ;)