fix: parse Webpack 5 module maps nested in UMD wrappers

[Menny1337]

Summary

Related to #372.

Webpack 5 UMD output nests its bootstrap IIFE inside the UMD factory. The analyzer previously missed that module map, while empty or unrelated competing IIFEs could also be selected incorrectly.

This change:

• discovers nested zero-argument Webpack bootstrap IIFEs
• ranks candidates using expected module-ID overlap and Webpack runtime structure
• excludes empty module maps
• preserves top-level and legacy parser fallbacks
• computes each asset's module metadata once
• adds Webpack 5 regression fixtures covering empty and decoy IIFEs

A patch Changeset is included.

What kind of change does this PR introduce?

Fix.

Did you add tests for your changes?

Yes. The tests cover unhinted, partially hinted, tied, and non-matching candidate selection, analyzer module-ID plumbing, and single-pass asset-module collection.

Validation:

• npm test -- test/parseUtils.js test/analyzerUtils.js — 27 passed
• npm run build — passed
• npm run test:coverage — 136 passed, 4 skipped
• npm run lint — ESLint, TypeScript, and Prettier passed
• git diff --check — passed

Does this PR introduce a breaking change?

No.

If relevant, what needs to be documented once your changes are merged or what have you already documented?

No documentation changes are required. This corrects existing bundle parsing behavior.

Use of AI

GitHub Copilot assisted with reproducing the failure, drafting the implementation and regression tests, and iterating on review feedback.

Human verification: I reviewed every generated change and the complete final diff, verified the behavior against Webpack 5.105.2 output, and ran all validation commands listed above. The patch also received independent review before publication. I understand the implementation and remain responsible for the contribution.

[changeset-bot]

🦋 Changeset detected

Latest commit: fee1368

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
webpack-bundle-analyzer	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[linux-foundation-easycla]

The committers listed above are authorized under a signed CLA.

• ✅ login: Copilot / name: Copilot (eeb1f0f, fee1368)
• ✅ login: Menny1337 / name: Menny Mezamer-Tov (eeb1f0f, fee1368)

[codecov]

Codecov Report

❌ Patch coverage is 86.48649% with 15 lines in your changes missing coverage. Please review.
✅ Project coverage is 76.67%. Comparing base (23adc7a) to head (fee1368).

Files with missing lines	Patch %	Lines
src/parseUtils.js	85.55%	11 Missing and 2 partials ⚠️
src/analyzer.js	90.47%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #733      +/-   ##
==========================================
+ Coverage   76.29%   76.67%   +0.37%     
==========================================
  Files          17       17              
  Lines         983     1046      +63     
  Branches      358      382      +24     
==========================================
+ Hits          750      802      +52     
- Misses        206      215       +9     
- Partials       27       29       +2     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[valscion]

Looks good to me! Can you take a look at the coverage report? To my eyes it looks like some branches you added are lacking code coverage. Ideally we'd have more tests that verify a real webpack bundle parses correctly without having to pass any custom optiona ourselves in test.

I'm ready to merge this once the coverage question has been dealt with

[valscion]

Looks like that #723 getting merged also caused a merge conflict here which needs to be resolved.