GraphiQL from local sources?

Is there a way to get GraphiQL to use local JS resources, instead of linking to external sources like unpkg.com? I don’t want to open those URLs up in my browser-policy.

I’d also like to know if I can turn that off. I’d like a graphql end point without that app at all if possible in production. I have a local graphiql installed through homebrew.