• Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @xfournet

• Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

  Reported by @waydeshi in #76. A fix was also proposed by @aniebiet in #78.

• Fix TS2306 “not a module” errors in type definitions (#16) @andersk

• Ensure null source is respected (#26) @dragomirtitian

• Improve ts declarations to be null-safe (#27) @dragomirtitian

Allow to pass options to SourceMapGenerator using SourceMapGenerator.fromSourceMap as second argument

var generator = sourceMap.SourceMapGenerator.fromSourceMap(new SourceMapConsumer(), {
  ignoreInvalidMapping: true,
});

• Add generator options to fromSourceMap (#22) @ai

Add ignoreInvalidMapping option to SourceMapGenerator. If enabled, source-map-js will not throw an error on the incorrect previous source map. Instead, it will print warnings and ignore broken mappings.

var generator = new sourceMap.SourceMapGenerator({
  file: "my-generated-javascript-file.js",
  sourceRoot: "http://example.com/app/js/",
  ignoreInvalidMapping: true,
});

• Do not throw an error since broken prev map is popular issue #20 (#20) @ai
• Add ignoreInvalidMapping option (#21) @7rulnik

• Use sourceContents when non-null, even if it's an empty string (#17) @bshepherdson

• Add types for path imports (#13) @TrySound

• Remove cleanComments optimization (#10) @ai

Breaking Changes

Bundled files like source-map-js/dist/* doesn't exist anymore. Use source-map-js/lib/*.

PRs

• Fix package.json#typings field (#6) @chalkygames123
• Reduce memory usage of eachMapping w/ loop (#5) @noppa
• Reduce npm package size (#7) @ai