Back to Explore

7rulnik/source-map-js

GitHub
1 updates · last 90 days3 watchersOpen source

Last release:

Source-map-js is a Node-focused library that can generate and consume source maps, mapping between minified (generated) code locations and original source positions. It provides APIs like SourceMapConsumer and SourceMapGenerator to look up original positions from generated lines and columns, and to build or serialize source maps from mappings.

Project status

  • Actively maintained: Yes. The upstream and this repo show recent activity (last upstream push on 2026-09-30, and an update v1.2.2 on 2026-09-30), including security and stability fixes.
  • Updates cadence: Currently appears active, with a new update released on 2026-09-30 (v1.2.2). However, the previous tagged update before that was in 2024-09-08 (v1.2.1), so cadence has been irregular overall.

AI summary generated

AI-generated from public sources. May be inaccurate. Report

Recent updates

  • v1.2.2

    v1.2.2 primarily addresses security and runtime stability issues related to indexed source maps. It fixes a browser crash when CSP blocks unsafe-eval, and mitigates denial-of-service vectors tied to maliciously large or crafted indexed source map offsets (CVE-2026-93749).

    Security

  • v1.2.1

    Release v1.2.1 focuses on TypeScript declaration fixes and null-safety when consuming source maps. It also changes runtime behavior to avoid computing a source URL when the mapping source is null, and updates the public typing surface to better reflect nullable fields.

  • v1.2.0

    v1.2.0 extends `SourceMapGenerator.fromSourceMap` to accept a second argument, which is forwarded to the underlying `SourceMapGenerator` constructor. Release notes and README both document this new optional parameter.

    Features

  • v1.1.0

    This release introduces a new `ignoreInvalidMapping` option on `SourceMapGenerator` v1.1.0. When enabled, invalid mappings that would normally throw during validation are instead ignored and a warning may be logged.

    Features

  • v1.0.3

    Release v1.0.3 updates source content lookup behavior in the IndexedSourceMapConsumer. It ensures that source contents provided as an empty string are treated as valid non-null content and can be returned to callers.

  • v1.0.2

    Release v1.0.2 only documents a TypeScript typings change, described as adding types for path imports. The actual diff shows a much broader rewrite of the TypeScript declaration file (source-map.d.ts), including restructuring how the module is declared and expanding the exported type surface.

    Features

  • v1.0.1

    Release v1.0.1 primarily updates the package publish/build configuration by removing the cleanComments optimization. No library API or type/interface changes are shown in the diff.

  • v1.0.0

    Version 1.0.0 introduces a breaking change to how bundled files are referenced in the package. It also includes internal improvements aimed at reducing memory usage per eachMapping, and reducing overall npm package size, with a fix to the package.json typings field.

    Breaking