jscpd 5.3.0 released
Published on September 18, 2026 by Andrey Kucherenko

jscpd 5.3.0 is out — a health score for your codebase, a full project dashboard, and a new dead-code engine.

  • --health: one 0-100 score with an A-E grade, built from duplication, dead code and complexity, adjusted for project size. Extend it with your own metrics (coverage, security scans) via --health-input.
  • --dashboard: the whole picture on one screen — size, duplication by format, the most complex files and dead code, with the health score on top.
  • --dead-code: a new engine, basta, finds unused files, exports and imports across JavaScript, TypeScript, Vue, Svelte, Astro and Python, with a confidence score on every finding. It also ships as its own standalone "basta" command.
  • --complexity and --kind: the complexity summary without a clone scan, and filtering clones by how they were found (exact, renamed, similar).
  • A pre-release review round fixed several edge cases: config files that partially failed to parse, untrusted values reaching Markdown/HTML reports unescaped, and a couple of CLI validation gaps.

Thanks to @Dev-next-gen for fixing how plain text, log and CSV files handle comments in this release.


Install: npm i -g jscpd or cargo binstall jscpd