Get only the NoScript we want to our users
Noscript is Firefox extension, known for years security tool and simplest way to stop stuff. Author of Noscript never used public repository for demonstrating development progress, all known code was available as standalone archive or file from AMO. However, author used to sign components of archive before 18.104.22.168 version. All we have now to try guess files wasn't modified on a way, and still chance to recreate history of development by hands or by 3rd party repository for versions difference
TBB takes Noscript from servers of AMO during building and run-time addon updates. Do we trust them so much?