If everyone linked the &quot;canonical&quot; version of jquery, then that location would be worth a considerable amount of money to any sort of malicious actor. Just getting your version there for a few minutes could rope in many thousands of machines. Look at China&#x27;s attack on github earlier in the year for examples of the damage that that sort of decision could do.