> Whats worse is some of them are fetched externally rather than bundled with the host code thus increasing latency and potential security risks Some vendor SD

> Whats worse is some of them are fetched externally rather than bundled with the host code thus increasing latency and potential security risks Some vendor SDKs can be built and bundled from NPM, but most of them explicitly require you fetch their minified/obfuscated bundle from their CDN with a script tag. This is so they don't have to support older versions like most other software in the world, and so they can push updates without requiring customers to update their code. Try to use vendors that distribute open-source SDKs, if you have to use vendors.