jodskeys is a surgical tool for unpacking JavaScript bundles using their sourcemaps. It can restore original folder structures, infer module names, extract inline sourcesContent, and now — extract embedded base64 assets (images, fonts, svgs) from restored modules.
jodskeys url https://example.com- Downloads scripts from a live website.
- Resolves and downloads all
sourceMappingURLs. - Restores original sources and structure.
jodskeys single path/to/bundle.js- Extracts inline sourcemaps (if any) from a single JS file.
- Restores sources to an adjacent folder.
# Restore all downloaded domains in ./output
jodskeys local
# Restore just one specific target
jodskeys local output/example.com- Recursively processes any
.js.mapor.jsfiles underdownloaded_site/ - Extracts inline sourcemaps when present
- Restores sources into
restored_sources/ - NEW: Extracts embedded base64 assets (images/fonts) into
extracted_assets/
output/
├── example.com/
│ ├── downloaded_site/ # Raw JS + .map files
│ ├── restored_sources/ # Reconstructed original code
│ └── extracted_assets/ # Decoded assets from base64 exports
- Inline sourcemaps are saved as
.inline.mapand restored normally. - Assets like
.png,.woff,.ttf,.svgare decoded from strings like:export default "data:image/png;base64,..."
- Extensions are correctly inferred from MIME types.
- No more
.woff.woff,.svg+xml, or duplicated folders.
After updating the README and verifying functionality:
- Commit changes.
- Tag a release:
git tag vX.Y.Z
git push origin vX.Y.Z- Optionally publish to npm or bundle as a GitHub release.
For usage examples, see the examples/ directory or run with --help.
🔐 Happy unlocking.