Lazysizes Due Diligence
Run due diligence on Lazysizes: check compliance and get alerts when suppliers change.
Germany · github.com/aFarkas/lazysizes · 19 vendors
Lazysizes is a high-performance, SEO-friendly, and self-initializing JavaScript library designed for lazy loading images, iframes, and other web elements. It optimizes web page loading by dynamically loading resources only when they are about to become visible to the user, improving perceived performance and reducing bandwidth usage.
Resilience scores
- Digital Sovereignty: 5
- Digital Resilience: 3
- Financial Resilience: 2
Technology vendors
- Apple Inc. — Technology — United States
- Pusher — Technology — United Kingdom
- Zendesk, Inc. — Technology — United States
- and 16 more
Services catalogue
7 services in catalogue across 3 categories; runs on 19 sub-vendors.
- Workflows
- JavaScript Library
- Code Hosting
Insights
Last updated 2026-09-12 · revision 12
19 direct vendors, 206 subvendors
Direct vendors by controlling owner country (sample)
- Sweden: 1
- United States: 15
- China: 1
Subvendors by controlling owner country (sample)
- Finland: 1
- Sweden: 8
- Norway: 2
Compliance
1 in-scope framework identified; showing 1.
GDPR (source) — No public evidence
The project's author is based in Germany (EU). While the library itself doesn't process personal data, any associated services or data handling related to contributors could fall under GDPR. However, it appears to be a non-commercial, personal project.
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: 2/10
lazysizes is not a commercial entity and therefore cannot be assessed using conventional financial resilience metrics. It is a free, MIT-licensed open-source JavaScript library maintained by a single private individual (Alexander Farkas, Germany) with no revenue, no legal structure, no employees, and no disclosed funding mechanism of any kind. There are no financial statements, no balance sheet, no equity, and no operating costs on record. The score of 2 reflects the near-total absence of institutional or financial durability, despite the project's technical success and widespread adoption. From a project-continuity perspective, the primary resilience risk is extreme single-maintainer dependency. With no corporate sponsor, no foundation, no GitHub Sponsors page, and no Open Collective, the project has zero financial runway and no succession plan. The maintenance backlog — 175 open issues and 34 open pull requests with no releases since March 2021 — signals declining active stewardship. If the sole maintainer becomes unavailable, there is no institutional mechanism to continue the project. The one mitigating factor is the MIT licence, which allows any party to fork and continue the project independently. The 1,700+ existing forks and 45,200+ dependent repositories demonstrate deep ecosystem embedding, meaning the codebase will likely persist in some form regardless of the original repository's fate. However, this does not constitute financial resilience in any meaningful sense. Long-term relevance risk is also material: native browser support for lazy loading via the HTML 'loading=lazy' attribute (broadly available since 2021) directly substitutes the core functionality of lazysizes, creating a structural headwind to continued adoption growth. The combination of no funding, no governance, declining activity, and technological substitution pressure results in a very low resilience score.
Key strengths: MIT licence allows unlimited forking and continuation by third parties, 17,700+ GitHub stars and 45,200+ dependent repositories indicate deep ecosystem embedding, No debt, no liabilities, no financial obligations of any kind, Mature, stable codebase considered feature-complete by its author, Global usage across e-commerce, media, and web agency sectors
Risk factors: Single-maintainer dependency with no corporate sponsor, foundation, or succession plan, No revenue, no funding mechanism, no GitHub Sponsors or Open Collective presence, No releases since March 2021 (4+ years); 175 open issues and 34 open PRs unaddressed, Native browser 'loading=lazy' HTML attribute broadly supported since 2021 directly substitutes core library functionality, No governance structure, no steering committee, no institutional continuity mechanism, Not registered as a legal entity in any jurisdiction; no regulatory oversight or accountability
Workforce by country
- Germany: 1
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.