Protect your javascript source code
Your source code is public if you don’t know this simple trick:
When you build your project, the process generates a folder called “build” or any other as per framework policy. Just go to the build folder, and you will find some .jsextension files, and some are .map extension files. The js & map files are the source and map files. The map files are also important while developing. The map helps to debug.
There are two simple solutions to solve the problem. The ultimate target is to remove map files before deployment. Here is a simple way you can use it. Add GENERATE_SOURCEMAP = false at your package.json script section.
“scripts”: {“build”: “GENERATE_SOURCEMAP=false}
Removing maps manually will also work, but this is now a proper way.
https://medium.com/dev-genius/your-source-code-is-public-if-you-dont-know-this-e24a500edc5c