npx @wakaru/cli input.js -o output.js               # decompile a file
npx @wakaru/cli bundle.js --unpack -o out/          # unpack and decompile a bundle
npx @wakaru/cli dist/ --unpack -o out/              # scan a bundle output directory

• ✅ Bundle splitting — webpack 4/5, esbuild, Bun, Browserify
• ✅ Transpiler & minifier recovery — Terser, Babel, SWC, TypeScript
• ✅ Source map support for better names & import deduplication
• ✅ Rewrite levels: minimal | standard | aggressive

Production JavaScript is hard to read because multiple tools have transformed it:

• Bundlers collapse many modules into one file and inject runtime wrappers
• Transpilers downgrade modern syntax and insert helper functions
• Minifiers erase names, fold constants, and compress control flow

Wakaru handles all three in a single command — feed it a bundle, get back readable modules.

npm install -g @wakaru/cli@latest

Or pre-built binaries from GitHub Releases.

wakaru input.js -o output.js

Without -o, output goes to stdout. Stdin is also supported:

cat input.js | wakaru > output.js

wakaru bundle.js --unpack -o out/
wakaru bundle.js --unpack --raw -o out/    # raw split, no readability transforms
wakaru entry.js chunk.js --unpack -o out/  # unpack multiple explicit files
wakaru dist/ --unpack -o out/              # recursively scan a directory

Directory inputs are supported only with --unpack. Wakaru recursively scans .js, .mjs, and .cjs files, skips hidden files/directories and node_modules, and includes only files detected as bundles or chunks. Skipped files are not copied or decompiled. Explicit file inputs keep the normal fallback behavior when no bundle format is detected.

wakaru input.js --formatter -o output.js
wakaru bundle.js --unpack --formatter -o out/

--formatter runs a final formatting pass after decompilation. Off by default.

wakaru input.js --source-map input.js.map -o output.js

Source maps enable identifier recovery and import deduplication. They are currently supported only with a single input file.

wakaru extract input.js.map -o src/

Writes files embedded in the source map's sourcesContent to disk.

Wakaru offers three rewrite levels so you can choose the right tradeoff for your use case:

wakaru input.js --level minimal
wakaru input.js --level standard      # default
wakaru input.js --level aggressive

Wakaru refuses to overwrite existing files unless --force is passed.

Every kind of contribution is welcome.

Some areas where help is especially useful:

• Share real-world bundles that Wakaru doesn't handle well
• Report missing helper detection or false positives
• Report semantic or correctness issues

When reporting a bug, please include: the input code, the command you ran, the current output, and what you expected instead.

cargo test
cargo clippy -- -D warnings

Apache-2.0

_{Usage of wakaru for attacking targets without prior mutual consent is illegal. End users are responsible for complying with all applicable laws.}