Security through obscurity is not security. I see no reason why source maps should be unavailable.
depends.
if we’re talking about a personal website nobody will care. if you are a multibillion company and there’s the risk that literally anyone can create a 1:1 clone of your services… yeah that’s a bit of a trouble
Because source maps show how shitty your organization’s code and overall engineering practices are.
Ding ding ding
Open source code is usually quite nice and well done because money pressure is way less of an issue and everyone knows people will be looking at your code
That’s probably also why development is usually really slow and most maintainers can’t keep up/give up.
Nope, it is simply because they are overwhelmed. Either it’s too much work to do after your day job or just too much work for one person.
Also what I’ve heard from open-source project maintainers, once a project gets popular, the flood of feature requests is neverending. (Something I’m sure I contributed to over the years 🫣) And especially in cases of feature requests with niche usefulness or mismatching vision, they can sap developer morale.
Yo gimme a repo link, you can’t blueball us like that
Here it is https://github.com/rxliuli/apps.apple.com
Is this interesting for some reason?
It’s sensational news.
It gets the bottom 50% thinking Apple fucked up, and they can now ask ChatGPT to just copy the App Store because that’s all that is holding them back from being a temporarily embarrassed millionaire: Source Maps…
It’s how the web worked before minifiers, so kinda but not really.
You just have comments and original variable/function names.
I’m sure someone will argue this helps scrapers or hackers, but really it’s not that big of a deal.
Anyone capable of doing damage already knows how to format and read minified code anyway. I do it in prod all the time when I want to test something with an override, which causes the source map to become invalid.
