If they really wanted to hide it, there are some nasty obfuscators for JavaScript: https://obfuscator.io/