If there’s a version in the path, then the website referencing the script can include a hash, secure in the knowledge that the resource they reference should never change.