I was dumb enough to use https://unpkg.com/vue on my projects and now I have to deal with "Uncaught TypeError: Vue is not a constructor" this morning.
The only relevant discussion you can find regarding a privacy policy is a twitter thread that ends with the developer saying "I really should discourage adoption because it's getting too big."
No dig on them, but, really... at some point we need to start doing a better job of owning this stuff.
The issue was using an unversioned URL, which is a user error and has nothing to do with unpkg (other than allowing it)
It was my own fault for not self hosting or not pinning the version, but it was still a surprise!
related: The mess we're in (a talk by Joe Armstrong)
https://www.youtube.com/watch?v=lKXe3HUG2l4
(yes, I know, I should have vendored the dependency in the first place)