Always output source maps

Describe the issue

Currently, source maps are only written in development (using gulp-if and !PRODUCTION as condition). This makes it harder to inspect the code of the live site in the browser’s DevTools and as far as I see doesn’t really have any advantages, the code is open source anyway.

Suggested change

Shipping source maps makes it easier to inspect and debug code on the live site and also is nice for beginners who might want to take a look at the website’s code to discover how something was implemented. 😃 So I suggest removing the guarding calls to $.if() that currently wrap $.sourcemaps.write() as well as the condition for the devtool webpack config.

I’d be happy to submit a PR if you agree. 😃

---

Internal Tracking ID: EXPOSUREAPP-12958

[dsarkar]

@jonaskuske Thanks for your suggestion. Now implemented. Best wishes, DS

---

Corona-Warn-App Open Source Team

[svengabr]

@MikeMcC399

In theory, you should never have to debug in production. But in reality, it happens all the time since most users don’t run our project locally anyways.

There’s no security risk to shipping source maps to production since the code is open-source as @jonaskuske mentioned already. If a person thinks that code obfuscation is a reliable form of security then they already have a problem.

So from my point of view, we are good to proceed to bring the source maps to production.

It will add some megabytes to the package but the maps will only be downloaded with dev tools opened.