About GradeJS

[spalt08]

GradeJS is an open-source project that allows you to analyze webpack production bundles without having an access to the source code of a website. It detects a list of bundled NPM libraries and works even for minified or tree-shaken bundles.

Currently it supports webpack from 3 to 5 and have indexed 1,826 most popular NPM libraries over 54,735 releases. The complete list of indexed packages can be found here.

How it works

GradeJS parses the abstract syntax tree (AST) from a JavaScript file, detects the webpack bootstrap entities and localizes module boundaries. A webpack-bundled module usually represents either a single file of an NPM library or a subset of concatenated files. By using built-in AST hash functions, GradeJS generates special signatures per each exported entity, which are retrospectively looked up in the pre-made database index by a matching algorithm. The matching algorithm is quite straightforward and based on a probabilistic approach.

Plans & Roadmap

We are actively working on GradeJS on a full-time basis. These are some short-term features we would like to deliver as soon as possible:

• Handling other bundlers such as Rollup or Gulp.
• Accurate estimation of bundled module and package sizes.
• Vulnerabilities and security notifications based on the package versions.
• More insights and analytics on the exported entities level.
• Better accuracy and performance.

We Are Hiring

GradeJS is backed by investors and we are looking for experienced web developers to join our team.