afterpack

library0.0.15jsnpmunverified

AfterPack (v0.0.15) is a high-performance JavaScript obfuscator and security audit tool built with a Rust engine for 20-70x speed improvement over JS-based obfuscators. It offers free production-ready obfuscation with irreversible non-linear transforms, deterministic output (same input = same output), and source map generation for error tracking (Sentry/Datadog). The audit command scans live URLs for leaked secrets, exposed source maps, and unprotected resources, providing a security score (0-100) and interactive web reports. It ships TypeScript types, requires Node >=18, and supports dual runtime (native + WASM).

devops security

npm install afterpack

github ↗package ↗homepage ↗

INSTALL

IMPORT

SIG · AFTERPACK

afterpack

devopsjavascriptv0.0.15

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

afterpack

✓ npx afterpack

✗ npx afterpack@latest

CLI tool, primarily used via npx; not imported as a library module.

afterpack audit

✓ npx afterpack audit <url>

✗ npx afterpack --audit <url>

Audit command is a subcommand, not a flag.

afterpack obfuscate

✓ npx afterpack obfuscate <file>

✗ npx afterpack --obfuscate <file>

Obfuscation command also a subcommand (coming soon).

Scans example.com for leaked secrets, source maps, and security issues, then outputs a report URL.

npx afterpack audit example.com

Debug

Known issues

breakingNode.js 18+ requirement. Older versions will fail with syntax errors or runtime errors.

fix

Upgrade Node.js to version 18 or higher.

affects: >=0.0.1

deprecatedSome source map generation options may change in future releases.

fix

Pin to a specific version and watch changelogs.

affects: >=0.0.1 <1.0.0

gotchaDeterministic output: same input always produces same obfuscated output. This is by design but may surprise users expecting randomness.

fix

Use the --inflate flag for non-deterministic transforms if needed.

affects: >=0.0.1

gotchaAudit reports are uploaded to afterpack.dev. Sensitive data may be transmitted; ensure compliance.

fix

Run locally with --no-report flag if available, or audit on a staging environment.

affects: >=0.0.1

gotchaObfuscation transforms are irreversible. Ensure you retain original source maps for debugging.

fix

Always generate and store source maps using the --sourcemap flag.

affects: >=0.0.1

Errors

Common errors & fixes

Error: The engine "node" is incompatible with this module. Expected version ">=18". Got "16.x.x"

Node version is too old; afterpack requires Node >=18.

fix

Upgrade Node.js to version 18 or later (e.g., nvm install 18).

Cannot find module 'afterpack' or its corresponding type declarations

AfterPack is a CLI tool, not an npm module to import. Only use via npx or global install.

fix

Run `npx afterpack` instead of trying to import it.

command not found: npx

npx is not available; usually because npm is outdated or not installed.

fix

Install Node.js and npm (which includes npx) or update npm: `npm install -g npm`.

Upgrade

Version history

0.0.15latest on npm

Audit

Dependencies

No dependency data recorded yet.

Agent activity

66 hits · last 30 days

node

Amazon

Perplexity

OpenAI (training)

Resources

githubhttps://github.com/afterpack-dev/afterpack ↗

packageafterpack ↗

homepagehttps://afterpack.dev ↗