As always with these bookmarklets that load additional JS from a remote source: Be sure you understand the possible security implications. You're essentially XS

As always with these bookmarklets that load additional JS from a remote source: Be sure you understand the possible security implications. You're essentially XSS attacking yourself if that JS source is turning hostile for any reason. One possible solution is to use SRI to ensure the linked JS doesn't load if it changes for any reason, but doesn't work in that case as the CDN (unpkg.com) doesn't add a CORS header.