> How do you know they are taking yours, not someone else's

Because if the javascript source matches the source in the repo, then they copied it