a javascript static security analyzer tool