Noscript is Firefox extension, known for years security tool and simplest way to stop stuff. Author of Noscript never used [public repository](http://forums.informaction.com/viewtopic.php?p=10981#p10981) for demonstrating development progress, all known code was available as standalone archive or file from [AMO](https://addons.mozilla.org/). However, author used to sign components of archive [before 2.6.6.9 version](http://hackademix.net/2013/07/20/noscript-and-flashgot-unsigned/). All we have now to try guess files wasn't modified on a way, and still chance to recreate history of development by hands or by 3rd party [repository for versions difference](https://github.com/avian2/noscript) TBB takes Noscript from servers of AMO during building and run-time addon updates. Do we trust them so much?