Rappid source code leaking issue

[heng fan]

Hello:

I'm a IDE developer using the Eclipse Theia and use Rappid to create some diagram in my IDE. I have bought the Rappid source code. But the Theia is an electron application which means its source code is installed on user's computer. So the source code of Rappid will be exposed to users. Is there any way to avoid the leaking of Rappid source code?

[Roman Bruckner]

Hi,

do not distribute the unminified source code. Use the minified source code and create a single bundle with all the dependencies (obfuscating the source code is also an option).

Here's general answer to your question.

https://stackoverflow.com/questions/58103656/how-to-perform-obfuscation-of-source-code-and-protect-source-in-electron-js

Best,

Roman

On Wed, 6 Apr 2022 at 05:39, heng fan <heng...@terapines.com> wrote:

Hello:

I'm a IDE developer using the Eclipse Theia and use Rappid to create some diagram in my IDE. I have bought the Rappid source code. But the Theia is an electron application which means its source code is installed on user's computer. So the source code of Rappid will be exposed to users. Is there any way to avoid the leaking of Rappid source code?

--

---
You received this message because you are subscribed to the Google Groups "JointJS" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jointjs+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jointjs/ac376e10-9709-480b-a7fd-f389eaac9e03n%40googlegroups.com.

--

Roman Bruckner, CTO

client IO

http://client.io

http://jointjs.com

+420 776 504 406

[heng fan]

Hi Roman,

Thank you, I will follow the method.

Best,

Heng.

[heng fan]

Hi. Roman,

I used rappid like this.

The electro will package the all resource file in the app. And user can get the rappid.tgz。

Do i need to compress a uglify rappid.tgz?  By the way, how to do it.

Electorn builder can package the source code to app.asar. I don't know it whether enough for me.

Best,

Heng

[Roman Bruckner]

Hi,

I'd suggest you ask the electron community what is the best practice. I don't know. You can build the app (for Mac) and send it to me. I can tell you if it is safe regarding the Rappid license policy.

To be on the safe side you can ufligy the content of rappid.tgz and repack it with `npm pack`.

Best,

Roman

--

---
You received this message because you are subscribed to the Google Groups "JointJS" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jointjs+u...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/jointjs/5a4f6da9-b8ed-4c4e-b2c9-d812403a5faan%40googlegroups.com.

[heng fan]

Hi,

Thank you Roman!

I uglify the content of rappid. It work fine with the uglify package.

I remove some folder and rappid.min.js and uglify rappid.js.

But when I compress the uglify package to rappid.tgz with tar -czf rappid.tgz package, and yarn. It made a mistake.

 

I have cleaned the yarn cache, changed the yarn.lock and removed the node_modules.

Is my compression method wrong.

I also find uglify code in dist, can i use the rappid.min.js directly?

Any help will appreciate!

[Roman Bruckner]

Hi, you should have used npm pack to create the tarball (https://docs.npmjs.com/cli/v7/commands/npm-pack) and not tar -czf rappid.tgz package.

To view this discussion on the web visit https://groups.google.com/d/msgid/jointjs/40ea0b80-b375-4033-a50a-5d6fd2c1636dn%40googlegroups.com.

[heng fan]

Thank you, It work well