“What we have is a central repository a set of JavaScript libraries that we're monitoring, where we have a list of vulnerabilities connected to them, and we have some ways of identifying each library and each version.”

Transcript evidence from Conclusion: Season 4 Finale.