Export .source() - Never checks fs

I've got a case where anyone can specify the source through an API. However I don't want them able to specify "source" that's in fact a path of a potentially private file such as a config file on the server.

By using `lcovParser.source(stringHere)` I can negate the vulnerability.