
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@srcmap/remapping-wasm
Advanced tools
High-performance source map concatenation and remapping powered by Rust (WebAssembly)
High-performance source map concatenation and composition powered by Rust via WebAssembly.
Concatenation merges source maps from multiple bundled files into one, adjusting line offsets. Composition chains source maps through multiple transforms (e.g. TS -> JS -> minified) into a single map pointing to original sources. Alternative to @ampproject/remapping.
npm install @srcmap/remapping-wasm
Works in Node.js, browsers, and any WebAssembly-capable runtime. No native compilation required.
Merge source maps from multiple files into a single combined map:
import { ConcatBuilder } from '@srcmap/remapping-wasm'
const builder = new ConcatBuilder('bundle.js')
// Add source maps with their line offsets in the output
builder.addMap(chunkASourceMapJson, 0) // chunk A starts at line 0
builder.addMap(chunkBSourceMapJson, 1000) // chunk B starts at line 1000
const combinedJson = builder.toJSON()
Chain source maps through a transform pipeline into a single map:
import { remap } from '@srcmap/remapping-wasm'
// Your build: original.ts -> intermediate.js -> minified.js
// You have: minified.js.map (outer) and intermediate.js.map (inner)
const composedJson = remap(minifiedSourceMapJson, (source) => {
// Called for each source in the outer map
if (source === 'intermediate.js') {
return intermediateSourceMapJson // upstream source map JSON
}
return null // no upstream map, keep as-is
})
new ConcatBuilder(file?: string)Create a builder for concatenating source maps.
| Method | Returns | Description |
|---|---|---|
addMap(json, lineOffset) | void | Add a source map JSON at the given line offset |
toJSON() | string | Generate the concatenated source map JSON |
remap(outerJson, loader)Compose source maps through a transform chain.
| Parameter | Type | Description |
|---|---|---|
outerJson | string | The final-stage source map JSON |
loader | (source: string) => string | null | Returns upstream source map JSON, or null |
Returns the composed source map as a JSON string.
# Node.js (default)
npm run build
# Browser (ES module + .wasm)
npm run build:web
# Bundler (e.g. webpack, vite)
npm run build:bundler
High-performance source map tooling written in Rust. See also:
@srcmap/sourcemap-wasm - Source map parser (WASM)@srcmap/generator-wasm - Source map generator (WASM)@srcmap/symbolicate-wasm - Stack trace symbolication (WASM)MIT
FAQs
High-performance source map concatenation and remapping powered by Rust (WebAssembly)
The npm package @srcmap/remapping-wasm receives a total of 9 weekly downloads. As such, @srcmap/remapping-wasm popularity was classified as not popular.
We found that @srcmap/remapping-wasm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.