# unpkg: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 5 judge labels across 1 category by 5 of 14 models. Page: https://www.gane.ai/index/it/vendors/unpkg

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Content delivery networks](https://www.gane.ai/index/it/network/content-delivery-networks/index.md) | 0% | 57 | 80% | 5 |

## What the models said for it

- "Best for open‑source libraries: jsDelivr / UNPKG" (GLM 4.7 FlashX, CDN)

## And against it

- "Public/Open CDNs to Be Cautious About ... avoid relying on external public CDNs for library loading" (MiniMax M2.5, CDN)
- "A practitioner summary of why to avoid JS CDNs: ... use a CDN like jsdelivr or unpkg" (Muse Glimmer 30B, CDN)
- "Avoid or be cautious with public/shared CDNs (e.g., ... or UNPKG)" (Grok 4.20, CDN)
- "Has had similar code injection vulnerabilities in the past." (Kimi K2, CDN)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 1 | 1 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 1 | 1 |
| GLM 4.7 FlashX | 0 | 1 | 0 | 0 | 1 |
| MiniMax M2.5 | 0 | 0 | 0 | 1 | 1 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 1 | 1 |

## Sources returned with these answers

The sites and pages cited by the answers that named unpkg, from 8 of the 8 answers that named it (only the models that return a source list).

### Domains cited

- httptoolkit.com: 5
- github.com: 4
- arp242.net: 3
- arxiv.org: 3
- developers.google.com: 3
- blog.blazingcdn.com: 2
- blog.wesleyac.com: 2
- cdnetworks.com: 2
- cloudflare.com: 2
- dl.acm.org: 2

### Pages cited

- https://httptoolkit.com/blog/public-cdn-risks: 5
- https://arp242.net/cdn.html: 3
- https://arxiv.org/html/2301.03690v2: 3
- https://developers.google.com/search/blog/2024/12/crawling-december-cdns: 3
- https://github.com/httptoolkit/httptoolkit-website/blob/main/src/content/posts/public-cdn-risks.mdx: 3
- https://blog.blazingcdn.com/en-us/when-not-to-use-a-cdn-limitations-and-challenges-explained: 2
- https://blog.wesleyac.com/posts/why-not-javascript-cdn: 2
- https://dl.acm.org/doi/10.1145/3499428: 2

## In its own words

What unpkg's own pages state, read 2026-10-06. Stated by the vendor, not checked by the index.

- Positioning: The CDN for everything on npm (https://unpkg.com/)

## What it publishes

Every page unpkg.com exposes, read 2026-09-29: 10 addresses. By kind, pages and the last 90 days:


## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.