Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

third-party-web

Package Overview
Dependencies
Maintainers
0
Versions
54
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

third-party-web

Categorized data on third party entities on the web.

  • 0.24.5
  • Source
  • npm
  • Socket score

Version published
Weekly downloads
941K
decreased by-0.97%
Maintainers
0
Weekly downloads
 
Created
Source

Third Party Web

Check out the shiny new web UI https://www.thirdpartyweb.today/

Data on third party entities and their impact on the web.

This document is a summary of which third party scripts are most responsible for excessive JavaScript execution on the web today.

Table of Contents

  1. Goals
  2. Methodology
  3. npm Module
  4. Updates
  5. Data
    1. Summary
    2. How to Interpret
    3. Third Parties by Category
      1. Advertising
      2. Analytics
      3. Social
      4. Video
      5. Developer Utilities
      6. Hosting Platforms
      7. Marketing
      8. Customer Success
      9. Content & Publishing
      10. CDNs
      11. Tag Management
      12. Consent Management Provider
      13. Mixed / Other
    4. Third Parties by Total Impact
  6. Future Work
  7. FAQs
  8. Contributing

Goals

  1. Quantify the impact of third party scripts on the web.
  2. Identify the third party scripts on the web that have the greatest performance cost.
  3. Give developers the information they need to make informed decisions about which third parties to include on their sites.
  4. Incentivize responsible third party script behavior.
  5. Make this information accessible and useful.

Methodology

HTTP Archive is an initiative that tracks how the web is built. Every month, ~4 million sites are crawled with Lighthouse on mobile. Lighthouse breaks down the total script execution time of each page and attributes the execution to a URL. Using BigQuery, this project aggregates the script execution to the origin-level and assigns each origin to the responsible entity.

npm Module

The entity classification data is available as an npm module.

const {getEntity} = require('third-party-web')
const entity = getEntity('https://d36mpcpuzc4ztk.cloudfront.net/js/visitor.js')
console.log(entity)
//   {
//     "name": "Freshdesk",
//     "homepage": "https://freshdesk.com/",
//     "category": "customer-success",
//     "domains": ["d36mpcpuzc4ztk.cloudfront.net"]
//   }

Updates

2021-01-01 dataset

Due to a change in HTTPArchive measurement which temporarily disabled site-isolation (out-of-process iframes), all of the third-parties whose work previously took place off the main-thread are now counted on the main thread (and thus appear in our stats). This is most evident in the change to Google-owned properties such as YouTube and Doubleclick whose complete cost are now captured.

2019-05-13 dataset

A shortcoming of the attribution approach has been fixed. Total usage is now reported based on the number of pages in the dataset that use the third-party, not the number of scripts. Correspondingly, all average impact times are now reported per page rather than per script. Previously, a third party could appear to have a lower impact or be more popular simply by splitting their work across multiple files.

Third-parties that performed most of their work from a single script should see little to no impact from this change, but some entities have seen significant ranking movement. Hosting providers that host entire pages are, understandably, the most affected.

Some notable changes below:

Third-PartyPreviously (per-script)Now (per-page)
Beeketing137 ms465 ms
Sumo263 ms798 ms
Tumblr324 ms1499 ms
Yandex APIs393 ms1231 ms
Google Ads402 ms1285 ms
Wix972 ms5393 ms

2019-05-06 dataset

Google Ads clarified that www.googletagservices.com serves more ad scripts than generic tag management, and it has been reclassified accordingly. This has dropped the overall Tag Management share considerably back down to its earlier position.

2019-03-01 dataset

Almost 2,000 entities tracked now across ~3,000+ domains! Huge props to @simonhearne for making this massive increase possible. Tag Managers have now been split out into their own category since they represented such a large percentage of the "Mixed / Other" category.

2019-02-01 dataset

Huge props to WordAds for reducing their impact from ~2.5s to ~200ms on average! A few entities are showing considerably less data this cycle (Media Math, Crazy Egg, DoubleVerify, Bootstrap CDN). Perhaps they've added new CDNs/hostnames that we haven't identified or the basket of sites in HTTPArchive has shifted away from their usage.

Data

Summary

Across top ~4 million sites, ~2700 origins account for ~57% of all script execution time with the top 50 entities already accounting for ~47%. Third party script execution is the majority chunk of the web today, and it's important to make informed choices.

How to Interpret

Each entity has a number of data points available.

  1. Usage (Total Number of Occurrences) - how many scripts from their origins were included on pages
  2. Total Impact (Total Execution Time) - how many seconds were spent executing their scripts across the web
  3. Average Impact (Average Execution Time) - on average, how many milliseconds were spent executing each script
  4. Category - what type of script is this

Third Parties by Category

This section breaks down third parties by category. The third parties in each category are ranked from first to last based on the average impact of their scripts. Perhaps the most important comparisons lie here. You always need to pick an analytics provider, but at least you can pick the most well-behaved analytics provider.

Overall Breakdown

Unsurprisingly, ads account for the largest identifiable chunk of third party script execution.

breakdown by category

Advertising

These scripts are part of advertising networks, either serving or measuring.

RankNameUsageAverage Impact
1Truffle Bid17,5560 ms
2Bidswitch39,3490 ms
3Unruly Media6,9830 ms
4Nativo28,4060 ms
5AcuityAds9,4150 ms
6AdGear48,4851 ms
7Tribal Fusion121,6681 ms
8MaxPoint Interactive12,3191 ms
9Beeswax10,1081 ms
10Crimtan57,8061 ms
11TripleLift3,2511 ms
12adKernel12,2421 ms
13iPROM55,7392 ms
14Bidtellect10,7972 ms
15InMobi66,3612 ms
16OpenX11,22812 ms
1733 Across143,02517 ms
18Adform86,04121 ms
19AppNexus177,94822 ms
20GumGum123,91325 ms
21LoopMe42,79733 ms
22Constant Contact17,75734 ms
23Adyoulike4,22940 ms
24Sonobi54,96450 ms
25sovrn19,69459 ms
26OneTag29,75560 ms
27RTB House AdPilot5,70861 ms
28Simpli.fi10,40763 ms
29MailMunch17,49466 ms
30The Trade Desk15,93369 ms
31BlueCava5,97377 ms
32Twitter Online Conversion Tracking68,12879 ms
33DTSCOUT5,82581 ms
34ActiveCampaign14,77583 ms
35StackAdapt13,48484 ms
36Scorecard Research46,69687 ms
37Branch Metrics13,76890 ms
38Affiliate Window4,62193 ms
39Quora Ads9,098103 ms
40LinkedIn Ads187,285104 ms
41Criteo165,842118 ms
42Index Exchange33,560118 ms
43Impact Radius4,158127 ms
44Rakuten Marketing3,189127 ms
45Microad12,512129 ms
46LINE Corporation24,991138 ms
47Crowd Control70,113138 ms
48Bing Ads45,421146 ms
49Gemius15,825149 ms
50AudienceSearch51,541156 ms
51Intercept Interactive18,824160 ms
52ucfunnel ucX8,896163 ms
53IPONWEB19,682164 ms
54Simplicity Marketing2,983166 ms
55AdRiver4,609170 ms
56STINGRAY7,281171 ms
57Salesforce.com4,381185 ms
58Yahoo!8,039190 ms
59Technorati22,378193 ms
60i-mobile11,882195 ms
61Unbounce9,100199 ms
62Tynt162,031207 ms
63Outbrain11,439210 ms
64Smart AdServer109,986213 ms
65ID5 Identity Cloud65,666241 ms
66Media.net93,229244 ms
67TrafficStars7,539275 ms
68Amazon Ads178,313288 ms
69Adroll31,186321 ms
70Skimbit81,338326 ms
71Teads6,909331 ms
72LiveRamp Privacy Manager18,855339 ms
73fluct22,281341 ms
74Supership18,113379 ms
75Yandex Ads8,817460 ms
76Attentive9,166514 ms
77Cxense3,731533 ms
78Yahoo! JAPAN Ads53,919564 ms
79OptiMonk10,492607 ms
80VigLink6,674621 ms
81Klaviyo142,926628 ms
82Privy19,432633 ms
83WordAds102,326654 ms
84Geniee14,510681 ms
85Taboola50,480714 ms
86AdScore4,378771 ms
87LongTail Ad Solutions6,143776 ms
88LoyaltyLion4,213815 ms
89Integral Ad Science15,169827 ms
90Rubicon Project220,488994 ms
91Moat3,8611039 ms
92DoubleVerify4,7401171 ms
93Seedtag2,5131505 ms
94Sizmek5,7381579 ms
95Pubmatic221,3391673 ms
96Infolinks5,9541749 ms
97MGID9,9081916 ms
98Google/Doubleclick Ads1,172,4942968 ms
99Yahoo! Ad Exchange4,8582974 ms
100Mediavine9,7304101 ms

Analytics

These scripts measure or track users and their actions. There's a wide range in impact here depending on what's being tracked.

RankNameUsageAverage Impact
1Mouseflow4,98548 ms
2SpeedCurve RUM2,16953 ms
3WordPress Site Stats64,92556 ms
4Roxr Software11,38363 ms
5Pingdom RUM1,00865 ms
6Movable Ink3,98980 ms
7Sailthru1,39484 ms
8LiveRamp IdentityLink1,87888 ms
9Woopra1,27489 ms
10Treasure Data13,59395 ms
11mPulse32,66098 ms
12Smartlook17,274101 ms
13XiTi4,514103 ms
14StatCounter51,587104 ms
15Fastly Insights1,631108 ms
16Exponea1,330111 ms
17Conversant46,153112 ms
18Google Analytics4,492,386113 ms
19Brandmetrics14,878115 ms
20Okta3,161118 ms
21CleverTap1,211127 ms
22Polldaddy2,255128 ms
23Stamped.io12,632134 ms
24Snowplow59,526139 ms
25Google Optimize41,792154 ms
26Marchex8,398160 ms
27Usabilla1,272161 ms
28Braze1,801161 ms
29Mixpanel20,441163 ms
30Quantcast68,514164 ms
31Reviews.co.uk1,896169 ms
32Qualtrics5,917172 ms
33Smart Insight Tracking1,731193 ms
34Matomo12,297195 ms
35Amplitude Mobile Analytics36,223195 ms
36Chartbeat6,715205 ms
37Parse.ly6,157223 ms
38Baidu Analytics33,318227 ms
39Trust Pilot44,933240 ms
40CallRail28,866247 ms
41UpSellit1,994249 ms
42etracker5,608270 ms
43Marketo1,126283 ms
44PageSense5,617297 ms
45Nielsen NetRatings SiteCensus17,440345 ms
46Survicate3,308353 ms
47Pendo13,333357 ms
48Segment27,196370 ms
49Reviews.io4,148375 ms
50Heap13,234377 ms
51Evergage2,658387 ms
52Snapchat49,940393 ms
53Bazaarvoice3,262432 ms
54Net Reviews2,784445 ms
55Crazy Egg20,553485 ms
56AB Tasty3,343492 ms
57BowNow2,295495 ms
58Evidon2,382496 ms
59Convert Insights4,173522 ms
60Nosto1,173607 ms
61Feefo.com2,034619 ms
62VWO8,018639 ms
63Hotjar331,044661 ms
64TrackJS2,353718 ms
65FullStory13,438724 ms
66Clerk.io ApS1,910776 ms
67PowerReviews1,524804 ms
68Lucky Orange14,012831 ms
69Optimizely15,596857 ms
70ContentSquare3,541912 ms
71Revolver Maps2,172972 ms
72Dynatrace3,4201121 ms
73Gigya2,0321243 ms
74Quantum Metric1,1701266 ms
75Inspectlet5,3381469 ms
76Yandex Metrica596,3661899 ms

Social

These scripts enable social features.

RankNameUsageAverage Impact
1Shareaholic1,29486 ms
2Pinterest131,399144 ms
3AddToAny66,597146 ms
4reddit16,277238 ms
5LinkedIn17,125306 ms
6ShareThis88,925338 ms
7AddShoppers1,915340 ms
8Facebook3,181,086388 ms
9TikTok215,993457 ms
10Kakao63,733642 ms
11PIXNET15,360709 ms
12Instagram10,2221260 ms
13SocialShopWave4,3101501 ms
14Twitter331,5112185 ms
15VK24,1072366 ms
16Disqus1,1352724 ms
17Tumblr17,7862804 ms
18LiveJournal9,5265835 ms

Video

These scripts enable video player and streaming functionality.

RankNameUsageAverage Impact
1Brightcove13,1241092 ms
2Vimeo141,1092848 ms
3Wistia26,7143186 ms
4Twitch1,4504518 ms
5YouTube962,4434991 ms

Developer Utilities

These scripts are developer utilities (API clients, site monitoring, fraud detection, etc).

RankNameUsageAverage Impact
1Checkout.com1,11761 ms
2Siteimprove9,17276 ms
3Raygun2,11089 ms
4Rollbar1,44293 ms
5Pusher1,45694 ms
6iovation2,098108 ms
7CyberSource (Visa)2,061118 ms
8Afterpay7,898124 ms
9Cloudflare348,270125 ms
10Ipify2,159132 ms
11Braintree Payments1,010136 ms
12Macropod BugHerd2,677138 ms
13Wufoo1,556148 ms
14Seznam9,260158 ms
15Bitly2,973158 ms
16Amazon Pay6,678161 ms
17Key CDN5,597186 ms
18Netlify1,323194 ms
19Highcharts3,106214 ms
20Riskified1,848218 ms
21LightWidget11,137226 ms
22Cookie-Script.com41,414227 ms
23OneSignal66,991254 ms
24New Relic234,387261 ms
25Foxentry1,927270 ms
26TrustArc7,377294 ms
27Google reCAPTCHA27,115304 ms
28Cookiebot171,303308 ms
29Accessibe Accessibility Overlay48,040313 ms
30Swiftype1,096350 ms
31Hexton32,051352 ms
32iubenda93,812356 ms
33Clarity338,320359 ms
34Trusted Shops17,034369 ms
35Other Google APIs/SDKs2,358,410378 ms
36Bugsnag13,395397 ms
37GitHub6,970434 ms
38Bold Commerce11,923435 ms
39Klevu Search1,415437 ms
40GetSiteControl3,062476 ms
41Affirm6,594500 ms
42Sentry89,800577 ms
43ThreatMetrix2,935606 ms
44Yandex APIs44,655621 ms
45Google Maps1,214,682633 ms
46Mapbox19,297663 ms
47PayPal56,797879 ms
48AppDynamics3,419907 ms
49GoDaddy122,066938 ms
50Forter4,345943 ms
51Vidyard1,061978 ms
52Secomapp2,2201102 ms
53Stripe127,0441133 ms
54Luigis Box2,2101217 ms
55Marker1,5081238 ms
56WisePops2,0441241 ms
57Signyfyd2,5671495 ms
58Fastly9,0991679 ms
59Adyen2,3222052 ms
60Rambler16,9074045 ms
61POWr39,6244749 ms
62Esri ArcGIS3,4125570 ms

Hosting Platforms

These scripts are from web hosting platforms (WordPress, Wix, Squarespace, etc). Note that in this category, this can sometimes be the entirety of script on the page, and so the "impact" rank might be misleading. In the case of WordPress, this just indicates the libraries hosted and served by WordPress not all sites using self-hosted WordPress.

RankNameUsageAverage Impact
1Blogger153,857151 ms
2Dealer2,332335 ms
3Civic6,533351 ms
4Salesforce Commerce Cloud4,001372 ms
5Typepad1,099412 ms
6WordPress311,129645 ms
7Shopify308,407759 ms
8Global-e1,201772 ms
9Ecwid5,521873 ms
10Rackspace1,8801264 ms
11Tilda69,9361316 ms
12Hatena Blog43,3071999 ms
13Webflow36,7633603 ms
14Squarespace236,2283642 ms
15WebsiteBuilder.com4,8174384 ms
16Wix447,7764780 ms
17Weebly66,2125814 ms

Marketing

These scripts are from marketing tools that add popups/newsletters/etc.

RankNameUsageAverage Impact
1Albacross1,34465 ms
2Madison Logic1,67074 ms
3DemandBase2,209126 ms
4Convertful1,556159 ms
5RD Station21,042306 ms
6Listrak1,204381 ms
7OptinMonster2,592410 ms
8Mailchimp47,204465 ms
9Sojern4,030482 ms
10Wishpond Technologies1,698516 ms
11Hubspot147,791523 ms
12iZooto2,302628 ms
13Yotpo27,061630 ms
14Kargo1,602672 ms
15PureCars1,813735 ms
16KARTE1,755898 ms
17Judge.me28,108975 ms
18Beeketing2,1441007 ms
19Wunderkind1,2491336 ms
20Sumo11,7861433 ms
21Bigcommerce19,7442258 ms
22Drift5,8114284 ms
23Tray Commerce13,8694626 ms

Customer Success

These scripts are from customer support/marketing providers that offer chat and contact solutions. These scripts are generally heavier in weight.

RankNameUsageAverage Impact
1SnapEngage1,000111 ms
2iPerceptions5,939133 ms
3Help Scout4,484139 ms
4Foursixty1,325202 ms
5LiveTex1,836202 ms
6WebEngage2,150240 ms
7Pure Chat3,261330 ms
8Tawk.to110,838369 ms
9Smartsupp21,642402 ms
10Comm1001,031448 ms
11Jivochat55,524637 ms
12LivePerson2,795688 ms
13Intercom32,7511100 ms
14Tidio Live Chat25,3531183 ms
15Olark6,7391320 ms
16ZenDesk76,2801442 ms
17LiveChat39,6131580 ms
18Dynamic Yield1,8601943 ms
19Freshchat6,6863069 ms

Content & Publishing

These scripts are from content providers or publishing-specific affiliate tracking.

RankNameUsageAverage Impact
1Spotify11,0161 ms
2OpenTable4,20678 ms
3TripAdvisor2,01888 ms
4Accuweather1,554169 ms
5SnapWidget13,527179 ms
6Tencent7,169249 ms
7Booking.com1,656417 ms
8Cloudinary2,554494 ms
9CPEx1,137504 ms
10Revcontent1,225864 ms
11Hotmart4,014926 ms
12AMP88,5581054 ms
13Embedly10,4281401 ms
14issuu2,6921957 ms
15SoundCloud6,0332479 ms
16Dailymotion5,4238720 ms
17Medium19,67312053 ms

CDNs

These are a mixture of publicly hosted open source libraries (e.g. jQuery) served over different public CDNs and private CDN usage. This category is unique in that the origin may have no responsibility for the performance of what's being served. Note that rank here does not imply one CDN is better than the other. It simply indicates that the scripts being served from that origin are lighter/heavier than the ones served by another.

RankNameUsageAverage Impact
1Google Fonts220,6020 ms
2Bootstrap CDN31,39455 ms
3FontAwesome CDN310,436219 ms
4Monotype3,294222 ms
5Microsoft Hosted Libs19,679225 ms
6Akamai9,228297 ms
7Adobe TypeKit102,866340 ms
8Fort Awesome3,769348 ms
9jQuery CDN713,886382 ms
10Cloudflare CDN618,006514 ms
11JSDelivr CDN348,981635 ms
12Azure Web Services43,334677 ms
13Unpkg138,968976 ms
14Google CDN3,340,3831058 ms
15Yandex CDN172,7171715 ms
16CreateJS CDN4,3772936 ms

Tag Management

These scripts tend to load lots of other scripts and initiate many tasks.

RankNameUsageAverage Impact
1Adobe Tag Manager183,984185 ms
2Yahoo! Tag Manager9,086225 ms
3TagCommander1,455286 ms
4Ensighten3,033545 ms
5Tealium27,489556 ms
6Google Tag Manager7,862,343708 ms

IAB Consent Management Providers are the 'Cookie Consent' popups used by many publishers. They're invoked for every page and sit on the critical path between a page loading and adverts being displayed.

RankNameUsageAverage Impact
1Trustcommander1,701176 ms
2Optanon114,644441 ms
3Usercentrics CMP47,7351018 ms

Mixed / Other

These are miscellaneous scripts delivered via a shared origin with no precise category or attribution. Help us out by identifying more origins!

RankNameUsageAverage Impact
1Browser-Update.org12,85639 ms
2ReadSpeaker5,346106 ms
3ResponsiveVoice6,401121 ms
4Polyfill service1,293209 ms
5Browsealoud1,874304 ms
6Amazon Web Services104,820375 ms
7Heroku14,1271074 ms
8Calendly4,0071563 ms
9uLogin1,4272923 ms

Third Parties by Total Impact

This section highlights the entities responsible for the most script execution across the web. This helps inform which improvements would have the largest total impact.

NamePopularityTotal ImpactAverage Impact
Google Tag Manager7,862,3435,570,434 s708 ms
YouTube962,4434,803,260 s4991 ms
Google CDN3,340,3833,534,531 s1058 ms
Google/Doubleclick Ads1,172,4943,480,534 s2968 ms
Wix447,7762,140,310 s4780 ms
Facebook3,181,0861,232,848 s388 ms
Yandex Metrica596,3661,132,490 s1899 ms
Other Google APIs/SDKs2,358,410891,484 s378 ms
Squarespace236,228860,388 s3642 ms
Google Maps1,214,682768,992 s633 ms
Twitter331,511724,490 s2185 ms
Google Analytics4,492,386507,048 s113 ms
Vimeo141,109401,820 s2848 ms
Weebly66,212384,979 s5814 ms
Pubmatic221,339370,370 s1673 ms
Cloudflare CDN618,006317,591 s514 ms
Yandex CDN172,717296,239 s1715 ms
jQuery CDN713,886272,882 s382 ms
Medium19,673237,122 s12053 ms
Shopify308,407234,053 s759 ms
JSDelivr CDN348,981221,626 s635 ms
Rubicon Project220,488219,220 s994 ms
Hotjar331,044218,861 s661 ms
WordPress311,129200,823 s645 ms
POWr39,624188,155 s4749 ms
Stripe127,044143,964 s1133 ms
Unpkg138,968135,670 s976 ms
Webflow36,763132,439 s3603 ms
Clarity338,320121,291 s359 ms
GoDaddy122,066114,510 s938 ms
ZenDesk76,280110,014 s1442 ms
TikTok215,99398,799 s457 ms
AMP88,55893,307 s1054 ms
Tilda69,93692,012 s1316 ms
Klaviyo142,92689,711 s628 ms
Hatena Blog43,30786,574 s1999 ms
Wistia26,71485,121 s3186 ms
Hubspot147,79177,360 s523 ms
Rambler16,90768,383 s4045 ms
FontAwesome CDN310,43667,992 s219 ms
WordAds102,32666,936 s654 ms
Tray Commerce13,86964,152 s4626 ms
LiveChat39,61362,598 s1580 ms
New Relic234,38761,136 s261 ms
VK24,10757,032 s2366 ms
LiveJournal9,52655,586 s5835 ms
Cookiebot171,30352,714 s308 ms
Sentry89,80051,840 s577 ms
Amazon Ads178,31351,283 s288 ms
Optanon114,64450,519 s441 ms
PayPal56,79749,905 s879 ms
Tumblr17,78649,877 s2804 ms
Usercentrics CMP47,73548,617 s1018 ms
Dailymotion5,42347,289 s8720 ms
Bigcommerce19,74444,589 s2258 ms
Cloudflare348,27043,646 s125 ms
Tawk.to110,83840,919 s369 ms
Kakao63,73340,901 s642 ms
Mediavine9,73039,901 s4101 ms
Amazon Web Services104,82039,268 s375 ms
Intercom32,75136,035 s1100 ms
Taboola50,48036,029 s714 ms
Jivochat55,52435,373 s637 ms
Adobe TypeKit102,86634,926 s340 ms
Adobe Tag Manager183,98433,980 s185 ms
Tynt162,03133,579 s207 ms
iubenda93,81233,363 s356 ms
Yahoo! JAPAN Ads53,91930,387 s564 ms
ShareThis88,92530,084 s338 ms
Tidio Live Chat25,35330,004 s1183 ms
Azure Web Services43,33429,328 s677 ms
Yandex APIs44,65527,736 s621 ms
Judge.me28,10827,415 s975 ms
Skimbit81,33826,509 s326 ms
Drift5,81124,893 s4284 ms
Smart AdServer109,98623,453 s213 ms
Blogger153,85723,258 s151 ms
Media.net93,22922,748 s244 ms
Mailchimp47,20421,956 s465 ms
WebsiteBuilder.com4,81721,119 s4384 ms
Freshchat6,68620,523 s3069 ms
Snapchat49,94019,609 s393 ms
Criteo165,84219,584 s118 ms
LinkedIn Ads187,28519,550 s104 ms
Esri ArcGIS3,41219,004 s5570 ms
MGID9,90818,983 s1916 ms
Pinterest131,39918,944 s144 ms
Yotpo27,06117,045 s630 ms
OneSignal66,99116,995 s254 ms
Sumo11,78616,885 s1433 ms
ID5 Identity Cloud65,66615,838 s241 ms
Tealium27,48915,289 s556 ms
Fastly9,09915,278 s1679 ms
Heroku14,12715,176 s1074 ms
Accessibe Accessibility Overlay48,04015,015 s313 ms
SoundCloud6,03314,955 s2479 ms
Embedly10,42814,605 s1401 ms
Yahoo! Ad Exchange4,85814,446 s2974 ms
Brightcove13,12414,337 s1092 ms
Optimizely15,59613,368 s857 ms
Instagram10,22212,875 s1260 ms
CreateJS CDN4,37712,852 s2936 ms
Mapbox19,29712,804 s663 ms
Integral Ad Science15,16912,543 s827 ms
Privy19,43212,293 s633 ms
Lucky Orange14,01211,647 s831 ms
Hexton32,05111,298 s352 ms
Quantcast68,51411,252 s164 ms
PIXNET15,36010,897 s709 ms
Trust Pilot44,93310,774 s240 ms
Infolinks5,95410,412 s1749 ms
Segment27,19610,055 s370 ms
Adroll31,1869,998 s321 ms
Crazy Egg20,5539,970 s485 ms
Geniee14,5109,883 s681 ms
FullStory13,4389,730 s724 ms
AddToAny66,5979,718 s146 ms
Crowd Control70,1139,656 s138 ms
Cookie-Script.com41,4149,397 s227 ms
Sizmek5,7389,060 s1579 ms
Olark6,7398,896 s1320 ms
Smartsupp21,6428,700 s402 ms
Snowplow59,5268,251 s139 ms
Google reCAPTCHA27,1158,234 s304 ms
AudienceSearch51,5418,028 s156 ms
Inspectlet5,3387,841 s1469 ms
fluct22,2817,606 s341 ms
Baidu Analytics33,3187,572 s227 ms
CallRail28,8667,122 s247 ms
Amplitude Mobile Analytics36,2237,074 s195 ms
Supership18,1136,861 s379 ms
Bing Ads45,4216,651 s146 ms
Twitch1,4506,551 s4518 ms
SocialShopWave4,3106,469 s1501 ms
Google Optimize41,7926,445 s154 ms
RD Station21,0426,440 s306 ms
LiveRamp Privacy Manager18,8556,397 s339 ms
OptiMonk10,4926,365 s607 ms
Trusted Shops17,0346,281 s369 ms
Calendly4,0076,261 s1563 ms
Nielsen NetRatings SiteCensus17,4406,016 s345 ms
DoubleVerify4,7405,550 s1171 ms
StatCounter51,5875,371 s104 ms
Twitter Online Conversion Tracking68,1285,356 s79 ms
Bugsnag13,3955,319 s397 ms
issuu2,6925,268 s1957 ms
LinkedIn17,1255,244 s306 ms
Bold Commerce11,9235,184 s435 ms
Conversant46,1535,168 s112 ms
VWO8,0185,119 s639 ms
Heap13,2344,991 s377 ms
Ecwid5,5214,818 s873 ms
LongTail Ad Solutions6,1434,766 s776 ms
Adyen2,3224,765 s2052 ms
Pendo13,3334,757 s357 ms
Attentive9,1664,708 s514 ms
Microsoft Hosted Libs19,6794,421 s225 ms
Technorati22,3784,311 s193 ms
uLogin1,4274,171 s2923 ms
VigLink6,6744,146 s621 ms
Forter4,3454,097 s943 ms
Scorecard Research46,6964,065 s87 ms
Yandex Ads8,8174,055 s460 ms
Moat3,8614,011 s1039 ms
Index Exchange33,5603,974 s118 ms
reddit16,2773,875 s238 ms
Signyfyd2,5673,839 s1495 ms
AppNexus177,9483,835 s22 ms
Dynatrace3,4203,835 s1121 ms
Seedtag2,5133,783 s1505 ms
Hotmart4,0143,718 s926 ms
WordPress Site Stats64,9253,615 s56 ms
Dynamic Yield1,8603,614 s1943 ms
LINE Corporation24,9913,437 s138 ms
LoyaltyLion4,2133,434 s815 ms
AdScore4,3783,374 s771 ms
Mixpanel20,4413,329 s163 ms
Affirm6,5943,294 s500 ms
IPONWEB19,6823,236 s164 ms
ContentSquare3,5413,229 s912 ms
mPulse32,6603,196 s98 ms
GumGum123,9133,128 s25 ms
AppDynamics3,4193,100 s907 ms
Disqus1,1353,092 s2724 ms
GitHub6,9703,026 s434 ms
Intercept Interactive18,8243,004 s160 ms
Akamai9,2282,740 s297 ms
Sonobi54,9642,739 s50 ms
Luigis Box2,2102,690 s1217 ms
fam7472,660 s3561 ms
WisePops2,0442,536 s1241 ms
Gigya2,0322,525 s1243 ms
LightWidget11,1372,513 s226 ms
Secomapp2,2202,446 s1102 ms
33 Across143,0252,443 s17 ms
SnapWidget13,5272,415 s179 ms
Outbrain11,4392,405 s210 ms
Matomo12,2972,396 s195 ms
Rackspace1,8802,377 s1264 ms
Gemius15,8252,360 s149 ms

Future Work

  1. Introduce URL-level data for more fine-grained analysis, i.e. which libraries from Cloudflare/Google CDNs are most expensive.
  2. Expand the scope, i.e. include more third parties and have greater entity/category coverage.

FAQs

I don't see entity X in the list. What's up with that?

This can be for one of several reasons:

  1. The entity does not have references to their origin on at least 50 pages in the dataset.
  2. The entity's origins have not yet been identified. See How can I contribute?

What is "Total Occurences"?

Total Occurrences is the number of pages on which the entity is included.

How is the "Average Impact" determined?

The HTTP Archive dataset includes Lighthouse reports for each URL on mobile. Lighthouse has an audit called "bootup-time" that summarizes the amount of time that each script spent on the main thread. The "Average Impact" for an entity is the total execution time of scripts whose domain matches one of the entity's domains divided by the total number of pages that included the entity.

Average Impact = Total Execution Time / Total Occurrences

How does Lighthouse determine the execution time of each script?

Lighthouse's bootup time audit attempts to attribute all toplevel main-thread tasks to a URL. A main thread task is attributed to the first script URL found in the stack. If you're interested in helping us improve this logic, see Contributing for details.

The data for entity X seems wrong. How can it be corrected?

Verify that the origins in data/entities.js are correct. Most issues will simply be the result of mislabelling of shared origins. If everything checks out, there is likely no further action and the data is valid. If you still believe there's errors, file an issue to discuss futher.

How can I contribute?

Only about 90% of the third party script execution has been assigned to an entity. We could use your help identifying the rest! See Contributing for details.

Contributing

Thanks

A huge thanks to @simonhearne and @soulgalore for their assistance in classifying additional domains!

Updating the Entities

The domain->entity mapping can be found in data/entities.js. Adding a new entity is as simple as adding a new array item with the following form.

{
    "name": "Facebook",
    "homepage": "https://www.facebook.com",
    "category": "social",
    "domains": [
        "*.facebook.com",
        "*.fbcdn.net"
    ],
    "examples": [
        "www.facebook.com",
        "connect.facebook.net",
        "staticxx.facebook.com",
        "static.xx.fbcdn.net",
        "m.facebook.com"
    ]
}

Updating Attribution Logic

The logic for attribution to individual script URLs can be found in the Lighthouse repo. File an issue over there to discuss further.

Updating the Data

This is now automated! Run yarn start:update-ha-data with a gcp-credentials.json file in the root directory of this project (look at bin/automated-update.js for the steps involved).

Updating this README

This README is auto-generated from the templates lib/ and the computed data. In order to update the charts, you'll need to make sure you have cairo installed locally in addition to yarn install.

# Install `cairo` and dependencies for node-canvas
brew install pkg-config cairo pango libpng jpeg giflib
# Build the requirements in this repo
yarn build
# Regenerate the README
yarn start

Updating the website

The web code is located in www/ directory of this repository. Open a PR to make changes.

Keywords

FAQs

Package last updated on 21 Jul 2024

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc