Download websites that use Clipboard.js

About Clipboard.js

Very few libraries tell you what a page is for. Clipboard.js does, because there is a single reason to load it. Somewhere on that page there is a string a visitor is expected to take away with them: an API token, a coupon code, a wallet address, a referral link, a block of configuration meant to be pasted somewhere else.

Zeno Rocha published the library in 2015 to replace the Flash based copy widgets of the previous era, and it has stayed small, dependency free and under an MIT licence ever since. The design goal was to be cheap enough that nobody argues about adding it, which is why it turns up on documentation portals, SaaS dashboards, coupon aggregators and crypto sites in roughly equal measure. Presence says nothing about the sophistication of the team and quite a lot about the function of the page.

As of September 2026 we record it on 456,145 domains, with 192,041 of those registered in United States and a heavy tilt toward .com. The distribution reflects who publishes developer facing content in English rather than anything intrinsic to a JavaScript helper of this size.

Version data adds a second dimension. We can separate 23 distinct releases across the population, and 2.0 recurs across a large part of it. A library this small is rarely upgraded once it works, so the version string on a domain behaves less like a statement about the maintainers and more like a timestamp of when the front end was last rebuilt. An old copy of a copy to clipboard helper is not dangerous in itself, but it is a dependable marker of an interface nobody has touched in a long time, which is exactly what an audit of supply chain freshness is looking for.

A caveat belongs here. When the helper is compiled into an application bundle by a build tool, its filename and version banner disappear and we cannot see it at all. What gets counted is the sites loading it as a recognisable file, which skews the visible population toward simpler and more hand assembled front ends and means the real footprint is larger than the number shown.

Checking a single site is a view source away and needs no dataset. The list answers a different question: which populations of sites expose copyable values, and how those populations overlap with a country, a registrar, a top level domain or the rest of the stack. Developer tool vendors use that to find documentation sites worth advertising on. Security teams use it to assemble a corpus of pages where a compromised script would be sitting on screen next to a secret. Neither job can be done one domain at a time.