A drop-in CDN for open source that adds privacy and safety: zero logs, no tracking, malware screening, and vulnerability data surfaced right inside the package browser. Assets are permanently replicated worldwide. Switch by just changing the hostname.
There are two problems with loading open-source packages on free CDNs today: - Privacy isn’t respected. Many CDNs log requests or rely on hidden tracking. - Safety isn’t guaranteed. Developers often pull code without knowing if it has been scanned or if vulnerabilities exist.
We built hop.js to fix that: - Zero logs, no tracking. We don’t monetize your data. - Safer by default. Packages are scanned before storage, and hop.js shows known vulnerabilities in the package browser (via GitHub and Snyk). - Fast from the first request. Assets are permanently replicated across 15 SSD-backed regions on the bunny.net 119-PoP network. No cold cache penalties. - Drop-in easy. Already using cdnjs or jsDelivr? Just swap the hostname to cdn.hopjs.net.
hop.js is free for open source projects. We hope it can be a safe, privacy-friendly alternative for the community.
Would love your feedback and thanks for checking it out!
Impressive, love how bunny.net bundles CDN, video, and compute in one transparent platform. That 119 PoP network is Remarkable. How does performance hold up under heavy video streaming loads?
Good Luck Team hop.js!
Feeling the energy. How was your process for setting an initial MVP scope?
Privacy-first CDN sounds fantastic. Love seeing open-source projects get performance tools that don’t compromise user data. Great work, folks!
Can you explain why the points in https://httptoolkit.com/blog/public-cdn-risks/ don't apply here? It's good to hear privacy promises, but with browser cache sharding now ubiquitous feels like shared public CDNs don't offer much benefit in 2025, and they do create plenty of unnecessary risks & problems (where, ironically, I do think Bunny's actual CDN product is a much better solution!)
At the very least, it'd be good to include subresource integrity in your default script tags, as CDNjs & jsDelivr already do, so users can easily ensure the content is not going to change unexpectedly.
About hop.js on Product Hunt
“A fast, free, privacy-first CDN for open-source projects”
hop.js launched on Product Hunt on October 7th, 2025 and earned 130 upvotes and 8 comments, placing #9 on the daily leaderboard. A drop-in CDN for open source that adds privacy and safety: zero logs, no tracking, malware screening, and vulnerability data surfaced right inside the package browser. Assets are permanently replicated worldwide. Switch by just changing the hostname.
hop.js was featured in Privacy (11k followers), Developer Tools (511.1k followers) and Security (2.6k followers) on Product Hunt. Together, these topics include over 75.6k products, making this a competitive space to launch in.
Who hunted hop.js?
hop.js was hunted by fmerian. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how hop.js stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
fmerian
Hello PH 👋
There are two problems with loading open-source packages on free CDNs today:
- Privacy isn’t respected. Many CDNs log requests or rely on hidden tracking.
- Safety isn’t guaranteed. Developers often pull code without knowing if it has been scanned or if vulnerabilities exist.
We built hop.js to fix that:
- Zero logs, no tracking. We don’t monetize your data.
- Safer by default. Packages are scanned before storage, and hop.js shows known vulnerabilities in the package browser (via GitHub and Snyk).
- Fast from the first request. Assets are permanently replicated across 15 SSD-backed regions on the bunny.net 119-PoP network. No cold cache penalties.
- Drop-in easy. Already using cdnjs or jsDelivr? Just swap the hostname to cdn.hopjs.net.
hop.js is free for open source projects. We hope it can be a safe, privacy-friendly alternative for the community.
Would love your feedback and thanks for checking it out!
– Marek @ bunny.net