kucherenko/jscpd](https:

v5.0.12 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 18d Developer Productivity

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai clones-detection code-quality coding-agents copy-paste copy-paste-detection

+9 more

cpd detector dry duplicates duplications mcp quality skill skills

Summary

AI summary

Broad release touches Published Packages, Chores, Bug Fixes, and https://github.com/laurynas-biveinis.

Full changelog

Highlights

Bug Fixes

Rename cpd binary and npm packages to jscpd — the CLI binary was named cpd (cpd.exe on Windows), which collided with an executable name flagged by some antivirus software (McAfee, Trend Micro), causing false-positive blocking. The binary and platform npm packages are now named jscpd / jscpd-*. Closes #826 (#854)
Recognize ; line comments for Lisp/Clojure/Scheme/Racket — these languages fell through to C-style comment handling, so ; comments were tokenized as code and --mode weak / --skip-comments couldn't drop them. Closes #849 (#850, thanks @laurynas-biveinis)
Use HTTPS for SARIF schema URI — avoids "untrusted URI" errors in SARIF-consuming tools (#844, thanks @chrisc-onaorg)

Chores

Use public repository URLs for @jscpd/core, @jscpd/finder, @jscpd/tokenizer, @jscpd/html-reporter, @jscpd/badge-reporter, @jscpd/leveldb-store, and @jscpd/redis-store package metadata (#831–#837, thanks @9904099)
Add cargo ecosystem to Dependabot config

Dependencies

Bump askama to 0.16.0 in /rust
Bump log to 0.4.33 in /rust
Bump env_logger to 0.11.11 in /rust
Bump rustc-hash to 2.1.3 in /rust

Thanks

Big thanks to @laurynas-biveinis, @chrisc-onaorg, and @9904099 for their contributions to this release! 🙌

Published Packages

[email protected] on crates.io
[email protected] on crates.io
[email protected] on crates.io
[email protected] on crates.io
[email protected] on crates.io
[email protected] on npm
[email protected] on npm
[email protected] on npm
[email protected] on npm
[email protected] on npm
[email protected] on npm
[email protected] on npm
[email protected] on npm

Breaking Changes

CLI binary and npm packages renamed from `cpd` to `jscpd` (e.g., `cpd` executable is now `jscpd`).
SARIF schema URI changed from HTTP to HTTPS, which may affect tools that cache the old insecure URL.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track kucherenko/jscpd](https:

Get notified when new releases ship.

About kucherenko/jscpd](https:

All releases →