Many sites offer the option for you to include their .js files from their servers. This can be a potential security hole, since you can't control what those other sites are putting in their .js code. If you are unsure, make sure you host all of the .js files on your server.