This release adds 6 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+9 more
Summary
AI summaryUpdates New Features, Bug Fixes, and https://github.com/kucherenko/jscpd/pull/808 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
v4 config fields are read and applied matching jscpd v4 behavior v4 config fields are read and applied matching jscpd v4 behavior Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Feature | Medium |
and become distinct: matches file-level globs, matches code-level regex patterns and become distinct: matches file-level globs, matches code-level regex patterns Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Feature | Medium |
path config support reads scan directories from the field, resolving relative paths against the config file's directory path config support reads scan directories from the field, resolving relative paths against the config file's directory Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Feature | Medium |
npm wrapper package publishes the same Rust binary under the name on npm with v5.x versioning npm wrapper package publishes the same Rust binary under the name on npm with v5.x versioning Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Feature | Medium |
now matches v4 behavior: accepts optional integer value ( exits 1, exits 2); and are now independent now matches v4 behavior: accepts optional integer value ( exits 1, exits 2); and are now independent Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Performance | Medium |
memory-mapped file I/O eliminates heap copies of file contents memory-mapped file I/O eliminates heap copies of file contents Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Performance | Medium |
SIMD-accelerated line counting is implemented SIMD-accelerated line counting is implemented Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Performance | Medium |
parallel detection pipeline avoids intermediate allocations using parallel detection pipeline avoids intermediate allocations using Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Performance | Medium |
JS tokenizer no longer clones source strings before parsing JS tokenizer no longer clones source strings before parsing Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Bugfix | Medium |
Fixed to match jscpd v4's behavior (was boolean, now optional integer) Fixed to match jscpd v4's behavior (was boolean, now optional integer) Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Bugfix | Low |
Fixed unique temp dir generation in reporter tests by adding PID to prevent race conditions under parallel test runners Fixed unique temp dir generation in reporter tests by adding PID to prevent race conditions under parallel test runners Source: granite4.1:30b@2026-06-10-audit Confidence: low |
— |
Full changelog
New Features
- v4 config backward compatibility — fields , , , and are now read and applied, matching jscpd v4 behavior
- and are now distinct: matches file-level globs, matches code-level regex patterns (previously conflated)
- path config support — reads scan directories from the field, resolving relative paths against the config file's directory
- npm wrapper package — publishes the same Rust binary under the name on npm with v5.x versioning
- now matches v4 behavior: accepts optional integer value ( exits 1, exits 2); and are now independent
- Performance improvements: memory-mapped file I/O (via ) eliminates heap copies of file contents; SIMD-accelerated line counting (via ); parallel detection pipeline uses to avoid intermediate allocations; JS tokenizer no longer clones source strings before parsing (thanks to @auterium, #808)
Bug Fixes
- Fixed to match jscpd v4's behavior (was boolean, now optional integer)
- Fixed unique temp dir generation in reporter tests (added PID to prevent race conditions under parallel test runners)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About kucherenko/jscpd](https:
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]