JavaScript Supply-chain Resources