Unpack. Unminify. Understand.
Fast JavaScript decompiler and bundle splitter for modern frontend.
npx @wakaru/cli input.js -o output.js # decompile a file
npx @wakaru/cli bundle.js --unpack -o out/ # unpack and decompile a bundle- ✅ Bundle splitting — webpack 4/5, esbuild, Bun, Browserify
- ✅ Transpiler & minifier recovery — Terser, Babel, SWC, TypeScript
- ✅ Source map support for better names & import deduplication
- ✅ Rewrite levels:
minimal|standard|aggressive
Production JavaScript is hard to read because multiple tools have transformed it:
- Bundlers collapse many modules into one file and inject runtime wrappers
- Transpilers downgrade modern syntax and insert helper functions
- Minifiers erase names, fold constants, and compress control flow
Wakaru handles all three in a single command — feed it a bundle, get back readable modules.
npm install -g @wakaru/cliOr pre-built binaries from GitHub Releases.
wakaru input.js -o output.jsWithout -o, output goes to stdout. Stdin is also supported:
cat input.js | wakaru > output.jswakaru bundle.js --unpack -o out/
wakaru bundle.js --unpack --raw -o out/ # raw split, no readability transformswakaru input.js --source-map input.js.map -o output.jsSource maps enable identifier recovery and import deduplication.
wakaru extract input.js.map -o src/Writes files embedded in the source map's sourcesContent to disk.
Wakaru offers three rewrite levels so you can choose the right tradeoff for your use case:
| Level | When to use |
|---|---|
minimal |
You need near-zero semantic changes — only safe, obvious transforms. Good for auditing or diffing where behavioral fidelity matters most. |
standard |
Default. Balanced readability and correctness for most use cases. |
aggressive |
You just want to read the code. Enables stronger intent-recovery heuristics that produce cleaner output but may alter edge-case behavior. |
wakaru input.js --level minimal
wakaru input.js --level standard # default
wakaru input.js --level aggressiveWakaru refuses to overwrite existing files unless --force is passed.
Every kind of contribution is welcome.
Some areas where help is especially useful:
- Share real-world bundles that Wakaru doesn't handle well
- Report missing helper detection or false positives
- Report semantic or correctness issues
When reporting a bug, please include: the input code, the command you ran, the current output, and what you expected instead.
Development setup
- Fork the repo and create your branch from
main - Install a stable Rust toolchain
- Run
cargo testto verify everything passes - Make your changes and add tests
Before submitting a PR:
cargo test
cargo clippy -- -D warningsThis project uses Conventional Commits. Please mention the issue number in the commit message or PR description.
Docs: architecture.md | testing.md | helper-detection.md
Usage of wakaru for attacking targets without prior mutual consent is illegal. End users are responsible for complying with all applicable laws.