denandz/sourcemapper

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1442 stars · 142 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Sourcemapper is a Go CLI tool that parses JavaScript sourcemap (.map) files, whether from URLs or local directories, and reconstructs the original source tree from them. It is commonly used in security assessments to recover unminified source code exposed by web applications.

Use cases

• extract original JavaScript source files from webpack sourcemaps
• recover source code from exposed .map files during a pentest
• download and parse a sourcemap from a URL and recreate the source tree
• recursively process a directory of .map files to dump sources
• fetch a JS bundle and automatically locate its sourcemap
• audit a website for accidentally published sourcemaps

When to choose

• you need to reconstruct original JS sources from sourcemap files
• you are doing web application security testing and want to mine exposed .map files
• you want a simple, fast Go binary with proxy and custom header support

When to avoid

• you need to generate sourcemaps rather than extract from them
• you need a GUI or library API rather than a command-line tool
• you need to process non-JavaScript sourcemaps or other build artifacts

Facets

cli-tool · maturity stable

parser web-scraping security developer-tools security web-development developer-tools cli windows cross-platform sourcemaps javascript recon pentesting webpack source-recovery command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="denandz/sourcemapper")