Here, see MS security at stake here https://github.com/mrdoob/three.js/ .