Javascript libraries insecurity