Microsoft wants to scan your JavaScript libraries