* now uses mozjs60 * drop CVE patches included in release * pname-ify * use flag arrays and placeholder