Free whiteglove setup from a ConsentStack Concierge
unpkg

unpkg

Open-source JavaScript package registry served via CDN. The unpkg CDN delivers npm package files globally. No behavioral tracking or advertising cookies are set; access logs record standard request metadata.

Back to Vendor Library

Overview

unpkg is an open-source CDN that serves files from npm packages. It delivers JavaScript libraries and other package assets globally with no behavioral tracking or advertising. unpkg is infrastructure for loading front-end dependencies.

What This Script Does

  • Serves static files (JavaScript, CSS, fonts) from npm packages via a global CDN
  • Delivers requested package files with appropriate caching headers
  • Logs standard HTTP request metadata (IP address, user agent, URL) in access logs
  • Does not set any cookies or tracking identifiers
  • Does not collect behavioral data or perform any form of user tracking

Consent & Compliance

  • Category: Essential
  • GDPR: No personal data collection beyond standard server access logs. Functions as essential infrastructure for delivering application dependencies. No consent required.
  • CCPA: Does not collect, sell, or share personal information. Standard CDN access logs are not subject to CCPA.
  • ePrivacy: Does not set cookies or access device storage. Exempt from consent requirements.

Should You Block This Without Consent?

No. unpkg is essential infrastructure that delivers JavaScript libraries and other static assets. It does not track users, set cookies, or collect personal data. Blocking it would break site functionality by preventing required dependencies from loading.

Is unpkg GDPR compliant?

unpkg's trackers are classified as essential (strictly necessary), so they are generally exempt from prior consent under the GDPR. You should still list them in your cookie policy and privacy notice so visitors know they are there.

Visit website

Consent Categories

Essential

Also Known As

unpkg CDNunpkg.comnpm CDNopen source CDN GDPRunpkg privacyjavascript CDN cookies

Industries

Computers Electronics and TechnologyBusiness and Consumer ServicesProgramming and Developer SoftwareArts and Entertainment

Tracked Domains (1)

unpkg's trackers are common, seen on about 4% of the sites ConsentStack has scanned. Scan your own site to see which of these are firing before consent.

unpkg.comEssential

unpkg.com is an essential domain operated by unpkg, used to keep the site working, including security, load balancing, and sessions. Seen on about 4% of scanned sites.

Frequently Asked Questions

Related Vendors

Engine USA
Engine USA
Engine USA, also known as EMX Digital, is a programmatic advertising marketplace for digital publishers. Scripts participate in header bidding auctions, serve targeted display and native ad units to publisher audiences, and track impressions and conversions for campaign reporting.
Teads
Teads
Native video advertising platform that serves in-stream and outstream video ads on publisher sites. The Teads script loads a video player that injects ads into content pages and measures viewability, play rates, and completion metrics. Sets cookies for frequency capping and audience targeting.
OpenJS Foundation
OpenJS Foundation
Open-source JavaScript module hosting CDN provided by the OpenJS Foundation. The jsDelivr and similar CDNs serve JavaScript packages globally. No behavioral tracking or advertising cookies are set by the CDN itself.
Shopify
Shopify
The underlying e-commerce platform for millions of online stores. Shopify's scripts handle storefront rendering, cart state, checkout flows, and payment processing. Also loads Shop Pay analytics and attribution scripts that track orders and referral sources across the Shopify merchant network.
OneTrust
OneTrust
Consent management and privacy compliance platform. The OneTrust script serves the cookie consent banner, records consent decisions, and conditionally blocks or allows other scripts based on user preferences. Also powers cookie audits, privacy preference centers, and data subject access request workflows.
StackPath
StackPath
Edge delivery and web security platform providing CDN, WAF, and DDoS mitigation services. Assets served through StackPath's CDN appear as StackPath hostnames in network requests. When bot protection is active, StackPath may inject a challenge script that collects browser fingerprint data to validate human visitors.

Manage consent for unpkg

ConsentStack automatically detects and manages unpkg trackers so your site stays compliant with global privacy regulations.

Get started free