NodeJs and Express: is there any risk my source code can be seen?

i am new to nodejs and express deployment...

i want to upload my files to my windows server machine, but i am afraid my source code can be retrieved using some url like http://myip:8080/app.js

Where should i put my files when i deploy my nodeJS app? Additional question: does anyone know where should i put my username and password for database instead of inside the source code?

[ moved thread ]

JavaScript is a client-side language. It is interpreted by the web browser viewing it. If you're concerned about writing code that cannot be seen by anyone, you cannot make your application in JavaScript.