As a number of other people have pointed out, we (I'm an engineer at Facebook) use http://www.java.com/js/deployJava.txt which Oracle has released under the BSD licensed. One of the requirements of the license is that their copyright header is preserved when distributing the source code.