Suggestion: Replace external dependencies with local packages

[plakatari]

Hi there,

we are currently evaluating using the @splinetool/runtime to load a local splinecode file via JavaScript for display on a web page. Upon inspecting the browser network tab we figured out that @splinetool/runtime is loading the Draco decoder via gstatic.com domain. We checked the code of the package and apart from said reference to gstatic.com there are multiple others to unpkg.com.

Unfortunately due to GDPR concerns this is currently a deal-breaker preventing us from using Spline in current and future projects.

We would suggest to install these dependencies locally and reference them from there to prevent any connections to external domains during execution in the user browser.