Free whiteglove setup from a ConsentStack Concierge
unpkg

unpkg

Open-source JavaScript package registry served via CDN. The unpkg CDN delivers npm package files globally. No behavioral tracking or advertising cookies are set; access logs record standard request metadata.

Back to Vendor Library

Is unpkg GDPR compliant?

ConsentStack classifies unpkg's trackers as essential (strictly necessary), so its banner does not block them. That is our classification, not a legal ruling. The exemption from prior consent comes from the ePrivacy Directive (Article 5(3)) and covers only what is strictly necessary for a service the visitor asked for, and the GDPR still governs any personal data, such as an IP address, sent to unpkg. List unpkg in your cookie policy and privacy notice so visitors know it is there.

Consent required
Generally exempt, classified strictly necessary
Consent category
essential
Tracker domain
unpkg.com

Overview

unpkg is an open-source CDN that serves files from npm packages. It delivers JavaScript libraries and other package assets globally with no behavioral tracking or advertising. unpkg is infrastructure for loading front-end dependencies.

What This Script Does

  • Serves static files (JavaScript, CSS, fonts) from npm packages via a global CDN
  • Delivers requested package files with appropriate caching headers
  • Logs standard HTTP request metadata (IP address, user agent, URL) in access logs
  • Does not set any cookies or tracking identifiers
  • Does not collect behavioral data or perform any form of user tracking

Consent & Compliance

  • Category: Essential
  • GDPR: No personal data collection beyond standard server access logs. Functions as essential infrastructure for delivering application dependencies. No consent required.
  • CCPA: Does not collect, sell, or share personal information. Standard CDN access logs are not subject to CCPA.
  • ePrivacy: Does not set cookies or access device storage. Exempt from consent requirements.

Should You Block This Without Consent?

No. unpkg is essential infrastructure that delivers JavaScript libraries and other static assets. It does not track users, set cookies, or collect personal data. Blocking it would break site functionality by preventing required dependencies from loading.

Visit website

Consent Categories

Essential

Also Known As

unpkg CDNunpkg.comnpm CDNopen source CDN GDPRunpkg privacyjavascript CDN cookies

Industries

Computers Electronics and TechnologyBusiness and Consumer ServicesProgramming and Developer SoftwareArts and Entertainment

Tracked Domains (1)

unpkg's trackers are common, seen on about 4% of the sites ConsentStack has scanned. Check your own site to see which of these are firing before consent.

unpkg.comEssential

unpkg.com is an essential domain operated by unpkg, used to keep the site working, including security, load balancing, and sessions. Seen on about 4% of scanned sites.

Frequently Asked Questions

Related Vendors

Engine USA
Engine USA
Engine USA, also known as EMX Digital, is a programmatic advertising marketplace for digital publishers. Scripts participate in header bidding auctions, serve targeted display and native ad units to publisher audiences, and track impressions and conversions for campaign reporting.
Teads
Teads
Native video advertising platform that serves in-stream and outstream video ads on publisher sites. The Teads script loads a video player that injects ads into content pages and measures viewability, play rates, and completion metrics. Sets cookies for frequency capping and audience targeting.
OpenJS Foundation
OpenJS Foundation
Open-source JavaScript module hosting CDN provided by the OpenJS Foundation. The jsDelivr and similar CDNs serve JavaScript packages globally. No behavioral tracking or advertising cookies are set by the CDN itself.
Shopify
Shopify
The underlying e-commerce platform for millions of online stores. Shopify's scripts handle storefront rendering, cart state, checkout flows, and payment processing. Also loads Shop Pay analytics and attribution scripts that track orders and referral sources across the Shopify merchant network.
OneTrust
OneTrust
Consent management and privacy compliance platform. The OneTrust script serves the cookie consent banner, records consent decisions, and conditionally blocks or allows other scripts based on user preferences. Also powers cookie audits, privacy preference centers, and data subject access request workflows.
StackPath
StackPath
Edge delivery and web security platform providing CDN, WAF, and DDoS mitigation services. Assets served through StackPath's CDN appear as StackPath hostnames in network requests. When bot protection is active, StackPath may inject a challenge script that collects browser fingerprint data to validate human visitors.

Manage consent for unpkg

ConsentStack automatically detects and manages unpkg trackers so your site stays compliant with global privacy regulations.

Get started free