Qualify video.js plugins with commit SHAs.