React-Decode

Requirements & limits

• The reviewed package declares Node.js >=20, but its locked Babel 8 dependencies require ^22.18.0 or >=24.11.0. The lock pins Babel parser/traverse 8.0.7, generator/types 8.0.6 and Prettier 3.9.10.
• Provide authorized JavaScript bundles, HTML, source maps or a URL. URL mode retrieves scripts, chunks and maps; source extraction requires strings in sourcesContent, not just mapping coordinates.
• API and value inference is bounded and heuristic: wrapper discovery uses at most six rounds, dynamic values can remain placeholders, and inferred request/response fields are not a verified API specification. Control-flow flattening and string-array obfuscation are outside the documented scope.
• The MIT LICENSE and package.json agree, but package.json declares 0.1.0 while the root lock metadata says 1.0.0 and ISC. Input bundles retain their own rights.
• Reports may contain credential-like strings from the input; --json prints them unmasked.

About this entry

The description was reviewed against primary sources.

Report an outdated entry ↗Suggest a translation fix ↗

Primary sources

1. README.md GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
2. package.json GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
3. package-lock.json GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
4. LICENSE GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
5. src/pipeline.js GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
6. src/analyze/requests.js GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
7. src/sourcemap.js GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
8. src/loader.js GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
9. test/pipeline.test.js GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda