Curious about something technically. I happened to see “unpkg.com” flash by in my browser status bar when my Bubble app page was loading. Does Bubble itself use unpkg? If so, that is rather concerning to me. I had a dreadful experience with unpkg last year (unrelated to Bubble) that almost led to the cancellation of a huge customer contract. For the uninitiated, unpkg is a CDN vouched for by Facebook in its React documentation. Turns out that unpkg, at least at that time, is a “best effort” service with no real SLA. It was infected with a virus last April and caused huge headaches for a lot of apps dependent on it. (We quickly switched to AWS CloudFront once the issue surfaced.)
Anyways, just want to make sure this is not a native Bubble dependency, or if it is, if someone from @Bubble could explain that decision. In the meantime, I’ll check my plugins, too – fair warning to everyone out there to be mindful of what you’re installing and what its dependencies are!