jscpd-rs v0.1.4
Packaging/security release focused on npm supply-chain signals.
- Removed npm install-time builds: the main npm package no longer declares a postinstall lifecycle script and no longer invokes Cargo during install.
- Shrunk the main npm package to runtime shim files plus metadata/docs needed by users.
- Kept prebuilt-first npm runtime; unsupported npm platforms should use cargo install jscpd-rs --locked.
- Added SECURITY.md, CONTRIBUTING.md, and Dependabot configuration.
- Updated package checks to prevent install lifecycle scripts from returning and to smoke-test local platform packages.