unpkg

unpkg

Open-source JavaScript package registry served via CDN. The unpkg CDN delivers npm package files globally. No behavioral tracking or advertising cookies are set; access logs record standard request metadata.

Back to Vendor Library

Overview

unpkg is an open-source CDN that serves files from npm packages. It delivers JavaScript libraries and other package assets globally with no behavioral tracking or advertising. unpkg is infrastructure for loading front-end dependencies.

What This Script Does

  • Serves static files (JavaScript, CSS, fonts) from npm packages via a global CDN
  • Delivers requested package files with appropriate caching headers
  • Logs standard HTTP request metadata (IP address, user agent, URL) in access logs
  • Does not set any cookies or tracking identifiers
  • Does not collect behavioral data or perform any form of user tracking

Consent & Compliance

  • Category: Essential
  • GDPR: No personal data collection beyond standard server access logs. Functions as essential infrastructure for delivering application dependencies. No consent required.
  • CCPA: Does not collect, sell, or share personal information. Standard CDN access logs are not subject to CCPA.
  • ePrivacy: Does not set cookies or access device storage. Exempt from consent requirements.

Should You Block This Without Consent?

No. unpkg is essential infrastructure that delivers JavaScript libraries and other static assets. It does not track users, set cookies, or collect personal data. Blocking it would break site functionality by preventing required dependencies from loading.

Visit website

Consent Categories

Essential

Also Known As

unpkg CDNunpkg.comnpm CDNopen source CDN GDPRunpkg privacyjavascript CDN cookies

Industries

Computers Electronics and TechnologyBusiness and Consumer ServicesProgramming and Developer SoftwareArts and Entertainment

Tracked Domains (1)

unpkg.comEssential

Frequently Asked Questions

Does unpkg require cookie consent?

No. unpkg is a CDN serving static npm package files with no behavioral tracking, advertising cookies, or user profiling. It logs standard HTTP request metadata (IP, user agent, URL) as server access logs. No consent is required under GDPR or CCPA for this infrastructure use.

What does unpkg track or collect?

unpkg collects only standard HTTP request metadata — IP address, user agent, and requested URL — in server-side access logs. No cookies are set, no behavioral profiles are built, and no advertising data is collected. It functions purely as a file delivery CDN for npm packages.

How does ConsentStack classify unpkg?

ConsentStack classifies unpkg as essential infrastructure. Because it serves JavaScript dependencies with no tracking or advertising purpose, it is not blocked under any consent configuration. ConsentStack allows unpkg requests regardless of visitor consent choices.

Related Vendors

Firebase
Firebase
Firebase is Google's mobile and web application development platform offering authentication, real-time database, cloud functions, and analytics. Web SDK scripts initialize Firebase services and may track app events via Firebase Analytics, which is powered by Google Analytics 4. Widely used in single-page apps and PWAs for backend infrastructure and usage tracking.
Google
Google
Google is the dominant provider of web analytics, advertising, and infrastructure tools. Scripts like Google Analytics, Tag Manager, Ads, and reCAPTCHA collect behavioral data, manage tag firing, serve targeted ads, and detect bots. Sets persistent cookies to track users and correlate activity across sites.
Google Tag Manager
Google Tag Manager
Google Tag Manager is a tag management system that lets marketers deploy and update analytics and marketing scripts without code changes. The GTM container script loads synchronously in the page head and injects configured tags, triggers, and variables on behalf of other vendors. No data collection of its own — acts as a loader for other scripts.
Google Fonts
Google Fonts
Google Fonts is a free font hosting service that serves hundreds of typeface families via a global CDN. Stylesheets and font files load from fonts.googleapis.com and fonts.gstatic.com to deliver web fonts to visitors. No advertising or tracking functionality is included.
reCAPTCHA
reCAPTCHA
Google reCAPTCHA is a bot detection and spam prevention service protecting web forms, login pages, and checkout flows. Scripts analyze user behavior, mouse movements, and browser fingerprints to distinguish humans from bots. The invisible reCAPTCHA v3 scores interactions without requiring user challenges.
Sign in with Google
Sign in with Google
Sign in with Google is an OAuth-based authentication service that enables users to log into websites using their Google account credentials. Scripts load the Google Identity Services library, display sign-in buttons, and handle token exchange for secure authentication. Stores session tokens and authentication cookies to maintain login state across page visits.

Manage consent for unpkg

ConsentStack automatically detects and manages unpkg trackers so your site stays compliant with global privacy regulations.

Get started