unpkg.com favicon

unpkg.com

Category: Content Servers, Information Technology

Scanned: May 10, 2026, 07:40 PM UTC · First seen: May 10, 2026 · Threat Engines: 0 / 92 · Times Scanned: 1
99 / 100 Trust Score Based on scan findings at the time of analysis
No Threats Found
0 - High Risk50 - Moderate100 - No Threats
Not scanned has not been scanned yet. Hit Scan Now to check it.

Scans can take up to 5 minutes to complete. Please keep this tab open - we'll redirect you to the report when it's ready.

Failed
Scan unavailable
Scan failed
Screenshot of unpkg.com Captured May 10, 2026
https://unpkg.com
Screenshot of unpkg.com
10 years
Extremely Popular - #777 Tranco rank (>100M monthly visitors)
Not listed (92 checked)
✓ Valid (TLS)
Cloudflare, Inc.
Toronto, Canada
cloudflare
Unknown
104.18.0.22
Domain & WHOIS Information
Registrar Cloudflare, Inc.
Registered January 6, 2016
Expires January 6, 2027
Name Servers alexia.ns.cloudflare.com
DNSSEC Unsigned
Hosting Cloudflare, Inc.
Reputation & Threat Check 92 security engines checked
File Scan Summary Powered by Quttera Engine
41 files scanned
No threats
41
Low Risk
0
Medium Risk
0
High Risk
0
No threats Low Risk Medium Risk High Risk
unpkg.com/gsap 664 B No threats
unpkg.com/preact%4010 10.9 KB No threats
unpkg.com/favicon.jpg 2.0 KB No threats
unpkg.com/jquery 250.0 KB No threats
unpkg.com/# 45.3 KB No threats
app.unpkg.com/_assets/scripts-5LWG6LQM.js 5.6 KB No threats
unpkg.com/react-router/# 129.5 KB No threats
unpkg.com/react%4019.2.6/jsx-runtime.react-server.js 236 B No threats
unpkg.com/react%4019.2.6/jsx-runtime.js 210 B No threats
unpkg.com/react%4019.2.6/react.react-server.js 212 B No threats
Show 31 more...
External Links & Domains
99
External Links
All Clean
0
Iframes
Clean
15
Referenced Domains
All Clean
0
Flagged Resources
None Detected
http://unpkg.com/favicon.jpgNot flagged
http://unpkg.com/gsapNot flagged
http://unpkg.com/jqueryNot flagged
http://unpkg.com/preact/dist/preact.min.jsNot flagged
http://unpkg.com/preact/src/Not flagged
http://unpkg.com/preact@10Not flagged
http://unpkg.com/preact@10.26.4/dist/preact.min.jsNot flagged
http://unpkg.com/preact@10.5.0/dist/preact.min.jsNot flagged
http://unpkg.com/preact@latest/dist/preact.min.jsNot flagged
http://unpkg.com/react-router/Not flagged
http://unpkg.com/react-router@5/Not flagged
http://unpkg.com/react-router@7.3.0/?metaNot flagged
http://unpkg.com/react-router@7.3.0/dist/?metaNot flagged
http://unpkg.com/react/Not flagged
http://unpkg.com/react@18.3.1/umd/react.production.min.jsNot flagged
Show 84 more...
app.unpkg.comNot flagged
developer.mozilla.orgNot flagged
docs.npmjs.comNot flagged
github.comNot flagged
nodejs.orgNot flagged
preactjs.comNot flagged
react.devNot flagged
reactjs.orgNot flagged
reactrouter.comNot flagged
unpkg.comNot flagged
workers.cloudflare.comNot flagged
www.cloudflare.comNot flagged
www.googletagmanager.comNot flagged
www.npmjs.comNot flagged
x.comNot flagged
unpkg.com Overview

Description of unpkg.com

UNPKG appears to be a public content delivery service for JavaScript and web-development packages published on npm. The homepage describes it as “the CDN for everything on npm,” and the visible examples show direct delivery of common frontend libraries such as React, Preact, Vue, GSAP, and Three.js. Based on the domain name, page metadata, and linked developer resources, the site is intended primarily for developers who want to load package files directly over the web.

The site is categorized by multiple web-classification providers under information technology, content delivery, and computers/software, which aligns with the observed content. Its references to npm documentation, developer resources, and Cloudflare-related infrastructure suggest it operates as part of the broader web-development ecosystem rather than as a consumer-facing service. Based on available data, unpkg.com appears to be an established technical platform used for package hosting and distribution.

Safety Assessment for unpkg.com

The scan results are consistently clean across the available indicators. At the time of this scan, 0 out of 92 security engines flagged the domain, the malware scan reported 0 flagged files out of 41 checked, and no suspicious external links, referenced domains, or iframes were identified in the provided results. In addition, the domain was reported clean by the checked blacklist and threat-database sources.

Contextual signals also support a lower-risk assessment. The domain has been registered for about 10 years, has a very strong traffic ranking, and the visible page content matches its stated purpose as a software content delivery platform. The screenshot does not show common warning signs associated with phishing, fake storefronts, or deceptive brand impersonation.

Based on available scan data, no significant threats were detected at the time of this scan.

Technical Description

The domain is hosted behind Cloudflare infrastructure and resolves to an IP address associated with that network. It presents a valid SSL/TLS certificate issued by Google Trust Services, with the provided certificate expiry in July 2026. The nameservers are also on Cloudflare, which is consistent with a globally distributed CDN-style deployment.

One minor technical note is that DNSSEC appears to be unsigned, which is not uncommon but means DNS responses do not benefit from DNSSEC validation. Aside from that, the provided technical indicators do not show notable security misconfiguration concerns at the time of this scan.

HTTP Redirect Chain
No redirects detected - direct connection to destination
Website Insights
#777
Tranco Rank
Extremely Popular
Visitors >100M/mo
Category: Content Servers, Information Technology
Rank History (30 days)
Mar 30 May 9
4 cookies detected
Essential0
Analytics4
Advertising0
Social0
4 1st party cookies
0 3rd party (trackers)
Dispute This Score For website owners
Believe this score is inaccurate?
If you are the website owner and believe the scan results contain errors or false positives, you can submit a dispute for manual review. Our team typically responds within 1-2 business days.
You will be asked to verify your email before the dispute can be processed.
By submitting this form, you confirm that the information provided is accurate. Disputes are reviewed manually and results may take up to 48 hours to update.
One more step..
To submit your dispute for unpkg.com, please click the verification link we just emailed you. Once verified, we'll review it within 1–2 business days.
This report was generated automatically and is provided for informational purposes only. Results are based on a point-in-time scan and may contain false positives or incomplete data. This does not constitute a security audit or certification. No vendor in the market can guarantee a 100% detection rate. If you believe this report is inaccurate, please submit a dispute.

Share your experience with this website. Was it safe? Did you encounter any issues?