# About & Trust

About the UNPKG open source project: who maintains it, how to report abuse or security issues, and the plain-language terms of the free service.

Source page: https://unpkg.dev/about

## The project

UNPKG is an open source project that serves everything on npm from a fast, global content delivery network. Source code: https://github.com/unpkg. The production source, including the website/CDN worker, package browser, esm service, and file backend, lives in that organization.

## Contact and abuse reports

- Support: support@unpkg.com
- X: https://x.com/unpkg
- GitHub: https://github.com/unpkg

To report abuse (malicious packages being distributed, phishing pages, or similar), email support@unpkg.com with the exact UNPKG URLs involved.

## Security

To report a security issue in UNPKG itself, email support@unpkg.com. For a compromised npm package, also report it to npm; UNPKG Shield (https://unpkg.dev/guides/supply-chain-security.md) describes how compromised versions are pinned or blocked at the edge for armed domains.

## Terms, in plain language

UNPKG is a free service provided as-is for loading files from npm. Package contents belong to their respective authors and are served as published to npm (subject to Shield enforcement for armed domains). There is no uptime guarantee or SLA on the free service.