# denandz/sourcemapper

Extract JavaScript source trees from Sourcemap files

Repository: https://github.com/denandz/sourcemapper
Canonical: https://ross.abutalabs.com/products/sourcemapper
Language: Go
License: BSD-3-Clause
License Family: permissive
Last push: 2026-07-24T09:12:55+00:00

## Health v2 (maintenance only)
Score: 75/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 94, release rhythm 35, longevity 100
- inputs: {"age_days": 2917, "days_push": 40, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1442, forks 142 (observed 2026-08-28T04:04:44.755104+00:00)

## What it is
Sourcemapper is a Go CLI tool that parses JavaScript sourcemap (.map) files, whether from URLs or local directories, and reconstructs the original source tree from them. It is commonly used in security assessments to recover unminified source code exposed by web applications.

## Use cases
- extract original JavaScript source files from webpack sourcemaps
- recover source code from exposed .map files during a pentest
- download and parse a sourcemap from a URL and recreate the source tree
- recursively process a directory of .map files to dump sources
- fetch a JS bundle and automatically locate its sourcemap
- audit a website for accidentally published sourcemaps

## When to choose
- you need to reconstruct original JS sources from sourcemap files
- you are doing web application security testing and want to mine exposed .map files
- you want a simple, fast Go binary with proxy and custom header support

## When to avoid
- you need to generate sourcemaps rather than extract from them
- you need a GUI or library API rather than a command-line tool
- you need to process non-JavaScript sourcemaps or other build artifacts

## Facets
- artifact type: cli-tool
- maturity: stable
- function: parser, web-scraping, security, developer-tools
- domain: security, web-development, developer-tools
- platform: cli, windows, cross-platform
- tags: sourcemaps, javascript, recon, pentesting, webpack, source-recovery, command-line, linux, macos

## Member repositories
- denandz/sourcemapper (main) score 75

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:44.755104+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:36:23.749661+00:00, confidence not recorded.
  - readme: https://github.com/denandz/sourcemapper (fetched 2026-08-28T04:04:44.755104+00:00, sha c1a523c603bd)
- Data as of 2026-08-30T08:39:29.467469+00:00.