{"action":"opened","issue":{"url":"https://api.github.com/repos/unpkg/unpkg.com/issues/147","repository_url":"https://api.github.com/repos/unpkg/unpkg.com","labels_url":"https://api.github.com/repos/unpkg/unpkg.com/issues/147/labels{/name}","comments_url":"https://api.github.com/repos/unpkg/unpkg.com/issues/147/comments","events_url":"https://api.github.com/repos/unpkg/unpkg.com/issues/147/events","html_url":"https://github.com/unpkg/unpkg.com/issues/147","id":384932441,"node_id":"MDU6SXNzdWUzODQ5MzI0NDE=","number":147,"title":"Ban imports of unpkg.com URLs","user":{"login":"justinfagnani","id":522948,"node_id":"MDQ6VXNlcjUyMjk0OA==","avatar_url":"https://avatars0.githubusercontent.com/u/522948?v=4","gravatar_id":"","url":"https://api.github.com/users/justinfagnani","html_url":"https://github.com/justinfagnani","followers_url":"https://api.github.com/users/justinfagnani/followers","following_url":"https://api.github.com/users/justinfagnani/following{/other_user}","gists_url":"https://api.github.com/users/justinfagnani/gists{/gist_id}","starred_url":"https://api.github.com/users/justinfagnani/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/justinfagnani/subscriptions","organizations_url":"https://api.github.com/users/justinfagnani/orgs","repos_url":"https://api.github.com/users/justinfagnani/repos","events_url":"https://api.github.com/users/justinfagnani/events{/privacy}","received_events_url":"https://api.github.com/users/justinfagnani/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-11-27T18:39:11Z","updated_at":"2018-11-27T18:39:11Z","closed_at":null,"author_association":"NONE","body":"Directly importing resources from unpkg.com is a pretty bad practice. Opening up all transitive dependents of a package to unpkg's security, reliability and privacy guarantees (however great they are now).\r\n\r\nTo discourage this, I'd propose not serving files with easily recognizable imports of unpkg.com URLs. eg, module imports and exports; script, link and img tags; require() calls; etc.\r\n\r\nTo not break existing usage, the ban can be gated by the date it's implemented. Existing files with such links would be grandfathered in."}}
{"actor":{"display_login":"justinfagnani"}}