Commit Graph

43 Commits

Author SHA1 Message Date
apk d790c6c1d3 chore: make master v5-only
Everything belonging to the v4 TypeScript engine moves to the master-v4
branch: apps/, packages/, build-utils/, changesets, pnpm workspace, turbo,
the Node.js CI workflow and the ts-* release jobs. What remains is the
Rust workspace under rust/, the npm wrapper and platform packages, the
GitHub Action, Docker image, flake, skills, benchmark and fixtures/.

- rust.yml gains a smoke job that runs the release binary against
  fixtures/ (json, sarif, html) and asserts clones and reporters
- release.yml keeps only the Rust jobs; pnpm removed from every workflow;
  audit.yml keeps cargo audit + cargo deny; dependabot drops the root npm entry
- root package.json becomes a thin private package depending on the exact
  jscpd@5 version so the pre-commit hook keeps installing the binary;
  sync-version.mjs keeps it in step
- .pre-commit-hooks.yaml used v4-only flags that the v5 CLI rejects; fixed
- FORMATS.md is now generated from the Rust tokenizer (224 formats)
- README, docs, CONTRIBUTING, SECURITY, package and crate descriptions,
  benchmark and skills rewritten for v5 on its own terms: no v5-vs-v4 speed
  multipliers anywhere, a single "Looking for v4?" pointer to master-v4
2026-09-02 10:15:10 +02:00
apk b0c31a4042 chore: apply audit fixes across repo, crates, npm wrapper and pipelines
Rust / crates.io
- report the invoked binary name in --version/--help (jscpd vs cpd)
- add repository, documentation, keywords, categories to all crates
- exclude tests/ from the jscpd crate package; add cargo-binstall metadata
- expand the crates.io README and render it on docs.rs

npm
- add funding field to jscpd, cpd and jscpd@4 packages
- add jscpd-linux-arm64-musl platform package and clearer unsupported-platform error
- enable provenance for the v4 changeset publish

Pipelines
- rust.yml: windows-latest in the matrix, drop dead schedule guard
- release.yml: cosign-sign release assets, floating v5 tag, LICENSE in tarballs,
  invoke the new docker.yml (GHCR multi-arch image) after each release
- audit.yml: nightly cargo audit, cargo deny and pnpm audit
- Dockerfile: multi-stage image from release binaries (distroless), mcp target for Glama

Docs / community
- README: shields badges, single primary install per OS, GitHub Action snippet,
  link to jscpd.dev, v5.1 features, 15 reporters, 224 formats, 8 platforms
- docs: @v5 action tag, Docker usage, baseline section, current crate versions
- YAML issue forms with engine selector, config.yml, CODEOWNERS
- remove stale .github/CONTRIBUTING.md stub, custom.md, TODO.md; untrack rust/jscpd-report.json
- examples: mark as v4 API, add a Rust cpd-finder example
2026-09-02 09:57:06 +02:00
Patrick McCann f0cca1248f Create example_github_action.yml 2024-07-25 10:59:09 -04:00
apk 0ce31b08e3 fix(types): fix issue with typing generation for jscpd app
fix #660
2024-07-03 08:24:11 +03:00
Andrey Kucherenko 0136794e42 feat: 🎸 change html reporter, remove vue application
✅ Closes: 538
2023-05-01 15:55:45 +03:00
dependabot[bot] 17a62ecb15 chore(deps): bump ws from 5.2.2 to 5.2.3 in /examples/browser
Bumps [ws](https://github.com/websockets/ws) from 5.2.2 to 5.2.3.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/5.2.2...5.2.3)

---
updated-dependencies:
- dependency-name: ws
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-11-06 14:54:05 +00:00
Andrey Kucherenko 7b94634dd5 Merge pull request #492 from kucherenko/dependabot/npm_and_yarn/examples/server/tmpl-1.0.5
chore(deps): bump tmpl from 1.0.4 to 1.0.5 in /examples/server
2021-11-06 16:52:53 +02:00
snyk-bot a99fcbdc11 fix: examples/server/package.json & examples/server/yarn.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-1579269
2021-09-25 04:21:33 +00:00
dependabot[bot] 90c932a63f chore(deps): bump tmpl from 1.0.4 to 1.0.5 in /examples/server
Bumps [tmpl](https://github.com/daaku/nodejs-tmpl) from 1.0.4 to 1.0.5.
- [Release notes](https://github.com/daaku/nodejs-tmpl/releases)
- [Commits](https://github.com/daaku/nodejs-tmpl/commits/v1.0.5)

---
updated-dependencies:
- dependency-name: tmpl
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-09-21 23:30:48 +00:00
dependabot[bot] 54c54ead07 chore(deps): bump path-parse from 1.0.6 to 1.0.7 in /examples/browser
Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases)
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

---
updated-dependencies:
- dependency-name: path-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-08-13 12:33:40 +00:00
dependabot[bot] 212b2b48f2 chore(deps): bump path-parse from 1.0.6 to 1.0.7 in /examples/server
Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases)
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

---
updated-dependencies:
- dependency-name: path-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-08-12 15:17:12 +00:00
dependabot[bot] e016028153 chore(deps): bump color-string from 1.5.3 to 1.6.0 in /examples/browser
Bumps [color-string](https://github.com/Qix-/color-string) from 1.5.3 to 1.6.0.
- [Release notes](https://github.com/Qix-/color-string/releases)
- [Changelog](https://github.com/Qix-/color-string/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Qix-/color-string/commits/1.6.0)

---
updated-dependencies:
- dependency-name: color-string
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-08-04 10:39:14 +00:00
dependabot[bot] c383f0a90a chore(deps): bump ws from 7.3.0 to 7.4.6 in /examples/server
Bumps [ws](https://github.com/websockets/ws) from 7.3.0 to 7.4.6.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/7.3.0...7.4.6)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-30 14:11:59 +00:00
Andrey Kucherenko fbb879d9e8 Merge pull request #452 from kucherenko/dependabot/npm_and_yarn/examples/server/hosted-git-info-2.8.9
chore(deps): bump hosted-git-info from 2.8.8 to 2.8.9 in /examples/server
2021-05-27 13:34:35 +03:00
Andrey Kucherenko bd8ac622c7 Merge pull request #451 from kucherenko/dependabot/npm_and_yarn/examples/browser/hosted-git-info-2.8.9
chore(deps): bump hosted-git-info from 2.8.8 to 2.8.9 in /examples/browser
2021-05-27 13:34:25 +03:00
Andrey Kucherenko d7622468f9 Merge pull request #455 from kucherenko/dependabot/npm_and_yarn/examples/server/lodash-4.17.21
chore(deps): bump lodash from 4.17.19 to 4.17.21 in /examples/server
2021-05-27 13:34:03 +03:00
dependabot[bot] 03b6413828 chore(deps): bump browserslist in /examples/browser
Bumps [browserslist](https://github.com/browserslist/browserslist) from 4.12.0 to 4.16.6.
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](https://github.com/browserslist/browserslist/compare/4.12.0...4.16.6)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-26 13:25:52 +00:00
dependabot[bot] b8c86de135 chore(deps): bump lodash from 4.17.19 to 4.17.21 in /examples/server
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.19 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.19...4.17.21)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-11 10:09:23 +00:00
dependabot[bot] 94d3b0ffa7 chore(deps): bump hosted-git-info in /examples/server
Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9.
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-11 10:07:41 +00:00
dependabot[bot] b8d5489cf4 chore(deps): bump hosted-git-info in /examples/browser
Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9.
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-11 10:06:49 +00:00
Andrey Kucherenko 3859f8c0d9 Merge pull request #438 from kucherenko/dependabot/npm_and_yarn/examples/browser/y18n-3.2.2
chore(deps): bump y18n from 3.2.1 to 3.2.2 in /examples/browser
2021-04-01 12:55:41 +03:00
dependabot[bot] 0f22ac5fbd chore(deps): bump y18n from 3.2.1 to 3.2.2 in /examples/browser
Bumps [y18n](https://github.com/yargs/y18n) from 3.2.1 to 3.2.2.
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)

Signed-off-by: dependabot[bot] <support@github.com>
2021-04-01 02:49:33 +00:00
dependabot[bot] 0c4962686d chore(deps): bump y18n from 4.0.0 to 4.0.1 in /examples/server
Bumps [y18n](https://github.com/yargs/y18n) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)

Signed-off-by: dependabot[bot] <support@github.com>
2021-04-01 02:45:24 +00:00
Andrey Kucherenko 72ecdf08fb Merge pull request #433 from kucherenko/dependabot/npm_and_yarn/examples/server/elliptic-6.5.4
chore(deps): bump elliptic from 6.5.2 to 6.5.4 in /examples/server
2021-03-09 23:20:03 +02:00
dependabot[bot] 165ba522d9 chore(deps): bump elliptic from 6.5.2 to 6.5.4 in /examples/server
Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.2 to 6.5.4.
- [Release notes](https://github.com/indutny/elliptic/releases)
- [Commits](https://github.com/indutny/elliptic/compare/v6.5.2...v6.5.4)

Signed-off-by: dependabot[bot] <support@github.com>
2021-03-09 21:12:59 +00:00
dependabot[bot] 3859e5b831 chore(deps): bump elliptic from 6.5.2 to 6.5.4 in /examples/browser
Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.2 to 6.5.4.
- [Release notes](https://github.com/indutny/elliptic/releases)
- [Commits](https://github.com/indutny/elliptic/compare/v6.5.2...v6.5.4)

Signed-off-by: dependabot[bot] <support@github.com>
2021-03-09 21:12:52 +00:00
snyk-bot d3d48105a5 fix: examples/server/package.json & examples/server/yarn.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-1038255
2021-03-09 20:30:15 +00:00
Andrey Kucherenko 9520ce8718 docs: ✏️ add example for typescript with tsconfig
✅ Closes: #416
2020-12-13 17:17:50 +02:00
dependabot[bot] 7642dc30f2 chore(deps): bump node-fetch from 2.6.0 to 2.6.1 in /examples/server
Bumps [node-fetch](https://github.com/bitinn/node-fetch) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/bitinn/node-fetch/releases)
- [Changelog](https://github.com/node-fetch/node-fetch/blob/master/docs/CHANGELOG.md)
- [Commits](https://github.com/bitinn/node-fetch/compare/v2.6.0...v2.6.1)

Signed-off-by: dependabot[bot] <support@github.com>
2020-09-13 00:27:09 +00:00
Andrey Kucherenko f8cff88c0f chore: 🤖 fix build, add right pass to source 2020-08-10 16:00:16 +03:00
Andrey Kucherenko 5f41a13977 ci: 🎡 fix build 2020-08-10 15:48:24 +03:00
Andrey Kucherenko 733c910bb5 docs: ✏️ add examples for jscpd and detectClones 2020-08-10 15:18:32 +03:00
Andrey Kucherenko 7cac329ffb v3.3.6 2020-08-10 14:59:55 +03:00
Andrey Kucherenko 3b34e4b4fd v3.3.5 2020-08-10 14:56:15 +03:00
Andrey Kucherenko f1067cc70d feat: 🎸 add ability to persist store
✅ Closes: #389
2020-08-10 14:40:08 +03:00
Andrey Kucherenko fe73735a9e Merge pull request #377 from kucherenko/dependabot/npm_and_yarn/examples/server/lodash-4.17.19
chore(deps): bump lodash from 4.17.15 to 4.17.19 in /examples/server
2020-07-22 15:59:35 +03:00
dependabot[bot] 752d94b2f3 chore(deps): bump lodash from 4.17.15 to 4.17.19 in /examples/browser
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.19.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.15...4.17.19)

Signed-off-by: dependabot[bot] <support@github.com>
2020-07-21 05:22:11 +00:00
dependabot[bot] c54bdd2d08 chore(deps): bump lodash from 4.17.15 to 4.17.19 in /examples/server
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.19.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.15...4.17.19)

Signed-off-by: dependabot[bot] <support@github.com>
2020-07-21 05:19:55 +00:00
Andrey Kucherenko 742cf85697 feat: 🎸 add browser example and start server 2020-06-20 16:06:33 +03:00
Andrey Kucherenko 61b8d47691 feat: 🎸 add browser example, define default options 2020-05-30 22:48:04 +03:00
Andrey Kucherenko 8ae3932a16 fix: 🐛 bug with html reporter
✅ Closes: #352
2020-05-06 15:42:09 +03:00
Andrey Kucherenko 45e192ebfc refactor: 💡 optimize languages loading 2020-05-05 17:32:40 +03:00
Andrey Kucherenko 56d58ae167 refactor: 💡 optimize performance of tokenizer 2020-05-05 13:42:56 +03:00