I generally think that the integration_key should not be bundled into the client side code. I didn't think about that when I initially built this. Its a fork of the paynow package which is meant to be used at the server side hence this wasn't a concern for them.