In public/admin/index.html, this site’s CMS is called like this:
<script src="https://unpkg.com/@sveltia/cms@0.172.2/dist/sveltia-cms.js"
integrity="sha384-rLinm2T7k+hELzRDmWwenzg5hwTV2Pqs+mHvP32ZwyE35nGEXvJ8Kuys/WKCjtvr"
crossorigin="anonymous"></script>
A pinned version, and the fingerprint of the expected file. If unpkg served different content tomorrow, the browser would refuse to run it. I was able to write this line because the file is public and its fingerprint can be recomputed in one command. With a closed service, it would not exist.
For some people, open source still suggests something free and a little fragile. I hear that reservation often, and I understand it: free rarely rhymes with serious. My experience says the opposite, and not for activist reasons.
Inspectable, therefore verifiable
An open tool is one whose code I can read. I know what it does and what it sends. When a client asks where their data goes, I can answer by showing them. A proprietary service answers « trust us », which may well be true and is never verifiable.
No subscription, no leash
Astro for the site and Sveltia for editing charge nothing and lock nothing in. No pricing tier creeping upward with traffic, no vendor shutting up shop with the content. If I want to swap a brick out, the formats stay standard: HTML, Markdown, git.
Numbers in the service of robustness
An open and widely used project is tested by a whole world of uses, many of which its authors had not foreseen. Bugs surface fast, fixes arrive fast. A closed tool is only tested by the people selling it, and on the cases they imagined.
It is for the same reason that I publish my own tools as open source, starting with EVA CSS.



