UNPKG — The CDN for everything on npm

The CDN for everything on npm. Load any file from any package by URL. Files are served from Cloudflare's edge.
Get startedBrowse a package
unpkg.com/:pkg@:ver/:filehttps://unpkg.com/:package@:version/:file
Point a script tag at a package file. Pin the full version in production so the response comes straight from the edge cache:
In a module, load the browser-ready build from esm.unpkg.com:
Need to know what's inside a package first? Append ?meta to any package URL for JSON metadata.
Agents are bad at recalling npm: versions that don't exist, files that were never published. The UNPKG MCP server gives your agent live resolution, real file listings, project audits, and import-map validation — so it builds direct UNPKG file lookups from facts, and tells you when a framework should keep its bundle instead.
It also checks what you're about to ship. Ask about any dependency — or your whole project — and it answers with exact-version malware verdicts and CVE checks, including the version to upgrade to. No account is needed for packages you name; connect a Shield account and it does the same for everything your domains actually serve, ranked by your traffic.
"Is lodash@4.17.20 safe to load? Check it for malware and CVEs."
"Audit my project, and check every dependency for known compromises before converting anything."
Exact-version files are cached at the edge for a year, and every cached byte is digest-verified. A damaged entry is evicted and refetched, never served. If a version has to be withdrawn, it can be evicted from every cache layer without touching any other version. The network page explains how, and the status page describes how changes ship safely.
Serving production traffic through UNPKG? UNPKG Shield (currently in Beta) watches every npm release as it publishes. Arm a domain and a compromised version is pinned to the last known-good release (or blocked) at the edge, before a browser executes it. How supply-chain defense works.
UNPKG is an open source project, free to use, and not affiliated with npm. The guides go deeper on everything above.
The CDN for everything on npm. Open source and free to use.
Contact ussupport@unpkg.com