I’m using a Content Security Policy that requires a nonce for inline scripts. Currently, the plugin hardcodes a script tag in a way that can’t be easily nonce’d.
I suggest using wp_get_inline_script_tag()/wp_print_inline_script_tag() to print the script tags so others can hook in and inject attributes in the tag. See https://core.trac.wordpress.org/ticket/59446