title: Including local vs. remote javascript libraries
body: <p>I'm using jsSHA 1.3.1 which I <a href="https://github.com/Caligatio/jsSHA/downloads" rel="nofollow noreferrer">downloaded here</a> and used in learning project on my localhost.  It gives a slightly different result than the copy I got by referring to the remote as follows:</p>
  
  <pre><code>&lt;script src="https://raw.github.com/Caligatio/jsSHA/master/src/sha1.js"&gt;&lt;/script&gt;
  </code></pre>
  
  <p>The remote copy works well for me, now, thanks to this excellent answer by @Andreas <a href="https://stackoverflow.com/questions/13671632/jssha-cryptojs-and-openssl-libraries-giving-different-results">here</a>.</p>
  
  <p>But it leaves me with a new question:  what's the rationale for including a copy vs. referring to a remote js library?  Is it like 'vendoring' the library, insulating my app from subsequent changes in the code?</p>