https://rud.is/b/2018/02/16/pym-js-library-vulnerability-in-widgetframe-package/