jQuery CDN

Fourteen sites with nothing inside the window

111 of the 125 sites had at least one company contacted before the banner window closed. That is 88.8 percent, and it ranks 72nd of the 88 companies in this index. The 14 sites where nothing landed inside the window are the more interesting residue. mediatek.com is one shape of it: 14 companies across the whole page load, none of them inside the window, with first contact at 2,045 milliseconds. Median first contact for the group was 673 milliseconds, 41st of 88, and the earliest anywhere in the set was 83 milliseconds. At the median, no company arrives after the window closes.

A companion list made largely of other CDNs

Google was present on 101 of the 125 sites, 80.8 percent. What follows is unusual for this index: Cloudflare on 44, 35.2 percent; jsDelivr on 41, 32.8; BootstrapCDN on 14, 11.2; Adobe Fonts on 13, 10.4; OneTrust on 13, 10.4; Cloudflare Analytics on 12, 9.6; and Font Awesome, Meta Pixel and Microsoft Clarity on 11 each, 8.8. Four of the top eight are library or asset networks. A page that fetches its JavaScript from a shared address usually fetches its icons, its typefaces and its CSS framework the same way. This is the profile of a site assembled from public building blocks rather than compiled into a single bundle.

Middling weight, thin banner coverage

The median site here contacted 7 companies, 64th of 88; made 29 third-party requests, 76th of 88; and carried 1 tracker, 78th of 88. Median companies contacted before the window closed was 5, 57th of 88, level with 22 others. 40 of the 125 sites carried a recognisable consent tool: the IAB TCF signal on 18, OneTrust on 14, Osano on 3, Cookiebot on 3, and Iubenda and Usercentrics on 1 each. Those are counts of sightings, not slices of the 40, because one site can run more than one layer.

Public institutions, news, and two firms from the ad industry

The examples include un.org, state.gov and columbia.edu alongside news at independent.co.uk and usnews.com, an image community at imgur.com, a press wire at prnewswire.com and a software vendor at pendo.io. Two of the twelve are advertising and measurement companies running the library on their own corporate sites: adsrvr.org and scorecardresearch.com, at 3 and 2 companies respectively. The weight range is wide. independent.co.uk and imgur.com each registered 14 companies, all inside the window on both. un.org registered 3 with first contact at 1,895 milliseconds, all 3 still counted inside the window; columbia.edu registered 5 at 1,280 milliseconds; parklogic.com 5; state.gov 4.

A library is not a tracker, and it is still a third party

jQuery CDN exists to deliver one file quickly, and nothing about it is analytics. But loading it means your browser resolving and connecting to a domain other than the one in the address bar, before the page has finished rendering, and that connection is visible to whoever operates the endpoint. This index counts that as contact and does not put it in the tracking classification. The 14 sites where nothing landed inside the window show that the connection does not have to fall there, which is a question of how the page is ordered rather than of what the library is.

Seen on the same pages

Companies most often contacted by the same sites. Co-presence only — the crawl records what arrived, not who called whom.

• GoogleTogether on 101 of these sites
• CloudflareTogether on 44 of these sites
• jsDelivrTogether on 41 of these sites
• BootstrapCDNTogether on 14 of these sites
• Adobe FontsTogether on 13 of these sites
• OneTrustTogether on 13 of these sites
• Cloudflare AnalyticsTogether on 12 of these sites
• Font AwesomeTogether on 11 of these sites