How to protect source code of chrome packaged app?

Question

If a chrome app can work offline it means that source code is downloaded somewhere.

My question is how to protect it?

The only thing that comes to my mind is minification of javascript code. Is there anything else?

Answer 1

Javascript is downloaded to the client machine (and can be manipulated there) for this reason it can never be secure or secret. As you say the best you can hope for is obfuscation.

Answer 2

You could try to put most of your app's functionality into a NaCL module. Good luck with that :-)

Answer 3

There is nothing to protect it as all in the web.

But you can add a license text ;)

––––– Update: you can try to use snapshot if you use the nw.js

Answer 4

From google developers FAQ

Can I sell a packaged app?
Yes, but there are risks in doing so. Specifically, it is easy for motivated people to bypass payments for packaged apps. This holds true even if you have used our Licensing API in your locally stored packaged app, since locally stored content is not secure and can be modified (including calls to the Licensing API). If you’d like to have the option of blocking access to your app by unauthorized users, selling a packaged app may not be the right solution for you. An alternative to consider is moving to a hosted app model with a server-side licensing check.