add security warning for non-default javascript option
drop build type in accordance with new cmake guidelines