Skip to content

jscpd-rs v0.1.4

Choose a tag to compare

@mydreamlabsllc mydreamlabsllc released this 02 Jun 04:32
· 22 commits to main since this release

Packaging/security release focused on npm supply-chain signals.

  • Removed npm install-time builds: the main npm package no longer declares a postinstall lifecycle script and no longer invokes Cargo during install.
  • Shrunk the main npm package to runtime shim files plus metadata/docs needed by users.
  • Kept prebuilt-first npm runtime; unsupported npm platforms should use cargo install jscpd-rs --locked.
  • Added SECURITY.md, CONTRIBUTING.md, and Dependabot configuration.
  • Updated package checks to prevent install lifecycle scripts from returning and to smoke-test local platform packages.