D
Overall Health

webpack/webpack


https://github.com/webpack/webpack
2026-04-19 00:22:00
C
Dead code
18% orphan symbols (231/1319)
C
Circular deps
5 cycles detected
F
Coupling
max fan-in: 131 (lib/RuntimeGlobals.js)
F
Security
6 concerns found

Overview

  • 8362 files indexed
  • 10798 code symbols extracted
  • 59628 symbol references tracked
  • 0 active memories (0 core, 0 stale)
  • Languages: javascript (8272), typescript (89), cpp (1)

God Nodes (most-referenced symbols)

These are the symbols your codebase depends on most. Changes here have the largest blast radius.

  • add — 1025 references
  • callback — 946 references
  • set — 854 references
  • get — 742 references
  • resolve — 675 references
  • apply — 448 references
  • read — 375 references
  • dep — 299 references
  • call — 287 references
  • indent — 243 references

Hub Files (highest PageRank)

Core architectural files — imported by many others.

  • lib/util/makeSerializable.js (1.00)
  • lib/util/serialization.js (0.89)
  • lib/WebpackError.js (0.55)
  • lib/util/memoize.js (0.51)
  • lib/RuntimeGlobals.js (0.41)
  • lib/ModuleTypeConstants.js (0.31)
  • lib/AbstractMethodError.js (0.30)
  • test/helpers/supportsWebAssembly.js (0.26)
  • lib/config/defaults.js (0.26)
  • lib/Template.js (0.25)

Orphans (potential dead code)

Named functions with zero detected references. Could be dead code, public API exports, or referenced dynamically.

  • RETURNS_TRUElib/ExportsInfo.js:62
  • Hashlib/util/Hash.js:11
  • findlib/util/SetHelpers.js:61
  • chunkHasRuntimeOrJslib/javascript/JavascriptModulesPlugin.js:131
  • printGeneratedCodeForStacklib/javascript/JavascriptModulesPlugin.js:159
  • renderMissingModuleErrorlib/javascript/JavascriptModulesPlugin.js:1645
  • HarmonyImportDependencylib/dependencies/HarmonyImportDependency.js:92
  • fnv1a32lib/util/numberHash.js:47
  • fnv1a64lib/util/numberHash.js:64
  • Parserlib/Parser.js:26

Coupling (high-PageRank files)

  • lib/util/makeSerializable.js (1.00)
  • lib/util/serialization.js (0.89)
  • lib/WebpackError.js (0.55)
  • lib/util/memoize.js (0.51)
  • lib/RuntimeGlobals.js (0.41)

Circular Dependencies (5 cycles)

  1. lib/AbstractMethodError.js -> lib/WebpackError.js -> lib/util/makeSerializable.js -> lib/util/serialization.js -> lib/serialization/FileMiddleware.js -> lib/serialization/SerializerMiddleware.js -> lib/AbstractMethodError.js
  2. lib/Dependency.js -> lib/RawModule.js -> lib/Module.js -> lib/ModuleGraph.js -> lib/dependencies/HarmonyImportDependency.js -> lib/Dependency.js
  3. lib/Dependency.js -> lib/RawModule.js -> lib/Module.js -> lib/ModuleGraph.js -> lib/dependencies/HarmonyImportDependency.js -> lib/dependencies/ModuleDependency.js -> lib/Dependency.js
  4. lib/util/binarySearchBounds.js -> lib/util/binarySearchBounds.js
  5. lib/DynamicEntryPlugin.js -> lib/EntryOptionPlugin.js -> lib/DynamicEntryPlugin.js

Security Issues (6 found)

Critical (1)

  • API tokenlib/util/hash/md4.js:14
  • "AGFzbQEAAAABCAJgAX8AYAAAAwUEAQAAAAUDAQABBhoFfwFBAAt/AUEAC38BQQALfwFBAAt/AUEACwciBARpbml0AAAGdXBkYXRlAAIFZmluYWwAAwZtZW1

High (5)

  • new Function() usagelib/util/binarySearchBounds.js:111
  • const result = new Function(fnSource);
  • new Function() usagelib/runtime/GlobalRuntimeModule.js:30
  • "return this || new Function('return this')();"
  • eval() usagelib/JavascriptMetaInfoPlugin.js:41
  • buildInfo.moduleConcatenationBailout = "eval()";
  • eval() usagelib/EvalDevToolModulePlugin.js:101
  • `eval(${
  • eval() usagelib/EvalSourceMapDevToolPlugin.js:219
  • `eval(${

Suggested Next Steps

  • Before refactoring add, run sverklo_impact to see the 1025 call sites
  • lib/util/makeSerializable.js is your most-imported file — changes here cascade widely
  • 15+ potential orphans detected — audit for dead code