a javascript static security analysis tool