AwesomeREA.org

Tool

React-Decode

Static-analysis CLI for compiled React JavaScript that produces readable bundle output and inferred API-request, route and application-constant reports. It can extract embedded source-map contents when available.

Requirements and limitations

  • The reviewed package declares Node.js >=20, but its locked Babel 8 dependencies require ^22.18.0 or >=24.11.0. The lock pins Babel parser/traverse 8.0.7, generator/types 8.0.6 and Prettier 3.9.10; runtime compatibility was not tested.
  • Provide authorized JavaScript bundles, HTML, source maps or a URL. URL mode retrieves scripts, chunks and maps; source extraction requires strings in sourcesContent, not just mapping coordinates.
  • API and value inference is bounded and heuristic: wrapper discovery uses at most six rounds, dynamic values can remain placeholders, and inferred request/response fields are not a verified API specification. Control-flow flattening and string-array obfuscation are outside the documented scope; complete original-source or application/backend behavior recovery is not established.
  • The MIT LICENSE and package.json agree, but package.json declares 0.1.0 while the root lock metadata says 1.0.0 and ISC. These are inspected package declarations, not a verified published release; input bundles retain their own rights.
  • Reports may contain credential-like strings from the input; --json prints them unmasked. The five synthetic node:test definitions were read, not run. No dependency installation, tool execution or target execution was performed.

About this entry

Type
Tool
Category
JavaScript and Electron tools
Relationship
Foundation tool
Targets
Website

Sources reviewed

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Primary sources

  1. README.md GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
  2. package.json GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
  3. package-lock.json GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
  4. LICENSE GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
  5. src/pipeline.js GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
  6. src/analyze/requests.js GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
  7. src/sourcemap.js GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
  8. src/loader.js GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda
  9. test/pipeline.test.js GitHub · alexandra-seredkina/React-Decode · Revision 80e8bda