AfterPack
Documentation
View as Markdown

AfterPack documentation

A post-build step that obfuscates the JavaScript your bundler produces. One dev dependency, one line; production output ships obfuscated and different on every build, development stays untouched.

Where do you want to start?

Quickstart · Frameworks

Get AfterPack into your build

Install the plugin and ship obfuscated output from your normal build — five minutes.

Start here
Concepts · Tiers

Evaluate it for my team

How AfterPack works, the threat it answers, and what each plan ships.

Start here
Best practices · Protection Map

Protect secrets & license logic

Mark high-value code with region directives so it gets the heaviest treatment, and read the Protection Map.

Start here
Reversal classes · Threat model

See what an attacker gets

The three reversal classes, what each one costs a reader of your bundle, and where the honest limits are.

Start here

Every token, scored by how much transformation it went through

Grey is untouched; green to red marks rising obfuscation complexity. Hover any token to see the transforms that ran and why. The preset ladder moves the whole bundle. Directives move one region.

Full Protection Map walkthrough
entitlements.jslight · complexity 5Open full size
entitlements.js, 54 lines, built at the light preset with a directive around the signature check. Click any token to see what was applied to it.

Use it when

  • •The browser receives logic someone would pay to copy or bypass: a license check, pricing rules, anti-cheat, a paywall, an embedded SDK.
  • •A customer or a security questionnaire asks whether the JavaScript you ship is readable.
  • •You want a post-build step that leaves development untouched.
  • •You serve JavaScript from a Cloudflare Worker and want it to change shape every rotation window.

Skip it when

  • •Everything valuable already runs on the server and the client is a thin view.
  • •The code is open source or is meant to be read.
  • •You need a secret to stay secret in the browser: no obfuscator does that, and AfterPack says so.

Reference