5 views

cloudflare/security-audit-skill

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

JavaScript★ 47,270+2,878 that day#6 on trending

Analyzed October 26, 2026 at c1c8a8c (main) with jscpd v5 in 0.8s.

C58.1/100
Project health3,037 lines of code (S)
Duplication57
9.1% in javascript
Dead code89
0%
Complexity39
100%

The score is jscpd's own --health model: markup, data and text left out, tests kept. The numbers below are the trending scan's.

8.19%duplicated over all files · 468 of 5,713 lines
28clones
38files scanned

Only 2 of the files count as code, too few for a code-only percentage; the numbers above cover every file.

Largest clones in the code

  • 32 lines in 2 placesjavascript199 tokens
    92const hasOwn = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
    93
    94class JsonStructureError extends Error {}
    95class SafeInputError extends Error {}
    96
    97function escapeUnsafeDiagnosticCharacters(value) {
    98  return String(value).replace(UNSAFE_DIAGNOSTIC_CHARACTER, (character) => {
    99    const codePoint = character.codePointAt(0);
    100    return codePoint <= 0xffff
    101      ? `\\u${codePoint.toString(16).padStart(4, "0")}`
    

    First 10 of 32 lines.

  • 23 lines in 2 placesjavascript122 tokens
    318  return errors;
    319}
    320
    321function hasValidUnicodeScalarValues(value) {
    322  let index = 0;
    323  while (index < value.length) {
    324    const first = value.charCodeAt(index++);
    325    if (first >= 0xd800 && first <= 0xdbff) {
    326      if (index >= value.length) return false;
    327      const second = value.charCodeAt(index++);
    

    First 10 of 23 lines.

  • 16 lines in 2 placesjavascript109 tokens
    718  return errors;
    719}
    720
    721function readFileWithinLimit(file) {
    722  const noFollow = fs.constants.O_NOFOLLOW;
    723  const nonBlock = fs.constants.O_NONBLOCK;
    724  if (!Number.isInteger(noFollow) || noFollow === 0 || !Number.isInteger(nonBlock) || nonBlock === 0) {
    725    // Node exposes no race-safe fallback on these platforms, so reject all inputs.
    726    throw new SafeInputError("OS no-follow and nonblocking input protection is unavailable");
    727  }
    
    601  return schema;
    602}
    603
    604function readFileWithinLimit(file) {
    605  const noFollow = fs.constants.O_NOFOLLOW;
    606  const nonBlock = fs.constants.O_NONBLOCK;
    607  if (!Number.isInteger(noFollow) || noFollow === 0 || !Number.isInteger(nonBlock) || nonBlock === 0) {
    608    throw new SafeInputError("OS no-follow and nonblocking input protection is unavailable");
    609  }
    610
    

    First 10 of 16 lines, the second copy on the right.

6 more
Largest clones over all files, tests and data included
By format, code only
FormatFilesLinesClonesDuplicated linesDuplication
javascript21,64591388.39%
By format, all files
FormatFilesLinesClonesDuplicated linesDuplication
javascript43,037242769.09%
json3537316029.8%
text1324813212.9%
markdown161,884000%
bash15000%
yaml12000%

Trending appearances

DayRankStarsFilesLinesClonesAll filesCodeHealthCommit
Oct 26, 2026#647,270 (+2,878)385,713288.19%—C 58.1c1c8a8c
Oct 25, 2026#145,041 (+2,264)385,713288.19%—C 58.1c1c8a8c
Oct 24, 2026#142,490 (+2,716)385,713288.19%—C 58.1c1c8a8c
Oct 23, 2026#239,976 (+2,979)385,713288.19%—C 58.1c1c8a8c
Oct 22, 2026#137,138 (+2,012)385,713288.19%—C 58.1c1c8a8c
Oct 21, 2026#134,596 (+1,712)385,713288.19%—C 58.1c1c8a8c
Oct 8, 2026#626,197 (+576)486,575287.12%—C 60.9c1c8a8c
Sep 21, 2026#218,253 (+2,428)486,531287.17%—C 61.6c1c8a8c
Sep 20, 2026#116,736 (+3,155)486,531287.17%—C 61.6c1c8a8c
Sep 19, 2026#114,150 (+3,006)486,531287.17%—C 61.6c1c8a8c
Sep 18, 2026#211,067 (+3,607)486,531287.17%——c1c8a8c
Sep 17, 2026#27,788 (+927)486,531287.17%——c1c8a8c

Want this for your own project? Install jscpd and run jscpd ., or measure it the way the baselines were measured.