Source maps uploaded to error tracking service
Why it matters
Minified production JavaScript produces stack traces like a.b is not a function at t (main.abc123.js:1:4821) — unactionable without the corresponding source map. When source maps are not uploaded to the error tracking service, every production stack trace requires a manual deobfuscation step that most teams skip, leaving errors effectively uninvestigated. ISO 25010 reliability.fault-tolerance depends on diagnostic capability; without readable stack traces, fault isolation time increases dramatically. Exposing source maps publicly (via productionBrowserSourceMaps: true) solves the readability problem but exposes your full source code to anyone with DevTools.
Severity rationale
Low because the defect slows diagnosis rather than causing failures directly — but unreadable production stack traces systematically increase mean time to resolution for every incident.
Remediation
Upload source maps to your error tracking service during the build — never serve them publicly. With Next.js and Sentry, withSentryConfig handles the upload automatically.
// next.config.ts
import { withSentryConfig } from '@sentry/nextjs'
export default withSentryConfig(
{ /* your next config */ },
{
org: process.env.SENTRY_ORG,
project: process.env.SENTRY_PROJECT,
// Source maps uploaded to Sentry, not served publicly:
sourcemaps: { disable: false },
}
)
Verify by triggering a deliberate error in staging and confirming the Sentry stack trace shows original filenames and line numbers, not minified identifiers.
DetectionPro
The detection method for this pattern is part of AuditBuffet Pro.
The full method (what to look for, pass and fail conditions, and how results get reported) ships inside the Error Resilience Audit. The pattern definition, severity rationale, and remediation remain openly licensed under CC-BY-4.0.
External references
- iso-25010:2011 · reliability.fault-tolerance
Taxons
History
- 2026-04-18·v1.0.0·Initial import from error-resilience·automated