We analysed almost 100 UK charity websites and found that ~1 in 6 are running vulnerable JavaScript dependencies.