Vercel
Security & compliance
Releases
productionBrowserSourceMaps: true
Part of the Preview deploy safety check · fix arrives as a guide
What it is
productionBrowserSourceMaps is enabled, so source maps are published with the production build.
Why it matters
Anyone can reconstruct your original source from the browser, including comments, internal module names, and the logic behind client-side checks. It removes the small obstacle minification provides.
How to fix it
Set it to false for production. Where you need maps for error reporting, upload them to your error tracker at build time instead of serving them publicly.
Run them all on your app
Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.