where does /liarjs-collect.min.js come from?

[lyyoung5]

the embed section in the root README says "one tag, no code":

<script src="/liarjs-collect.min.js"
        data-endpoint="https://api.example.com/fp"
        data-token="your-token"></script>

but nothing says how i get that file. it's a root-relative path, so it's implied i self-host it, and the README points at packages/collect/README.md for "Configuration, the payload shape, the endpoint contract and the privacy defaults" — not for sourcing the bundle.

so: is the minified bundle shipped in the published @liarjs/collect tarball (some dist/liarjs-collect.min.js i can copy out of node_modules), or do i have to clone the repo and run packages/collect/scripts/build.mjs myself? is there a CDN/unpkg path that's considered supported? scripts/smoke.mjs apparently "exercises both embed modes" so the build must emit it somewhere, but the output path isn't documented anywhere i can find.

also worth stating whether the file is versioned/pinned — if i self-host a copy, does a stale bundle produce samples that computeVerdict from a newer @liarjs/checks will mis-score?