The script linked is not being run on the client side when they use the site. I run the selection algorithm on a private computer, then broadcast the results to my site's database. My web server than sees the update by querying the database. I provide the verifyscript.js to the client so they can, on their own, download the file and run it via node on their private computer. They do this if they want to verify the fairness of a previous round. So verifyscript.js doesn't actually execute unless the user downloads it onto their private computer, installs the necessary packages, and runs it from their own command line. And even then, it's only to verify that I have selected the results according to the published algorithm. Sorry for the confusion - does that make more sense?