phpcpd-next 2.0 launches as fully rewritten MIT-licensed PHP duplicate code detector

·1 views

Released on September 13, 2026, phpcpd-next 2.0 is now available on Packagist as a complete rewrite — not a refactor — of the PHP copy/paste detection tool that was archived in 2023. The new version switches to an MIT license and introduces three detection engines, including Rabin–Karp for exact matches and a SourcererCC-based engine for structural similarity. It adds support for 28 languages for all tool output, a dead-code detection mode, confidence ranking, and Laravel-specific presets that automatically apply sensible scan exclusions. The tool also outputs SARIF 2.1.0 reports for integration with GitHub Code Scanning and supports incremental caching to speed up repeated runs.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Finds Six Real Bugs in Quantinuum's Quantum Computing Stack While Building Tools

A developer building three open-source tools for Quantinuum's guppy and HUGR quantum computing stack uncovered six genuine bugs in the process. The tools include qshelf, a package registry for quantum algorithms; Estimand, a fault-tolerant resource estimator; and qmatchpoint, a decoder integration layer. Four bugs were found in the guppylang library itself, including incorrect unitaries produced by quantum Fourier transform circuits. Two more significant bugs emerged in Estimand, one involving a missing additive constant in a tile-count formula traced to a cited research paper, and another where an incorrect threshold constant was silently used in a magic-state factory error model. The findings were reported to maintainers, with at least one fix already submitted as a pull request and others prompting ongoing technical discussion.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Opinion: Beginner-Friendly Linux Distros Do Not Hinder Your Linux Journey

A writer on DEV Community has pushed back against a How-To-Geek article arguing that avoiding the Linux terminal stunts a user's growth. The counter-argument holds that Linux's core strength lies in its diversity of distributions, each tailored to different user needs and skill levels. The author contends that beginner-friendly distros like Linux Mint serve a vital role by easing the transition from Windows or macOS and reducing new-user burnout. While acknowledging that tackling harder challenges, such as using Arch Linux, can drive technical growth, the author argues that graphical distros do not cause stagnation. Drawing on personal experience, the author credits Linux Mint as the gateway that sparked deeper curiosity about the Linux ecosystem over time.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

The 'Curse of Knowledge' Is Why You Never Hit Publish — Here Is How to Overcome It

Many writers hold back from sharing their ideas online because they assume their content is too obvious or lacks novelty, a bias rooted in a psychological phenomenon called the curse of knowledge. Research by Camerer, Loewenstein, and Weber (1989) and Birch et al. (2017) shows that familiarity with information leads people to overestimate how widely it is known. The author experienced this firsthand when a seemingly simple blog post — shared on Hacker News — unexpectedly reached the platform's front page, despite containing no original concept. This outcome reinforced the idea that authenticity and relatable perspective can resonate with readers even when the underlying idea is not new. The author encourages writers to test their ideas with people outside their usual circles and publish anyway, rather than discarding potentially valuable content through self-censorship.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

A Silent Cron Failure Went Unnoticed for 10 Weeks, Then the Watchdog Broke Too

A scheduled cron job in a GitHub repository stopped firing on 21 June 2026 and went undetected for ten weeks, causing scheduled blog posts to silently fail to publish. The team built a watchdog workflow to monitor scheduled jobs and alert via issues, and it worked correctly on its first run, filing an accurate report about the stalled cron. However, on the following three nights the watchdog itself crashed before completing its checks, producing failure logs visually identical to the successful alert run. The root cause was that GitHub's workflows API began returning a synthetic, file-less entry — "dynamic/dependabot/update-graph" — after Dependabot was enabled on the repository. When the watchdog tried to fetch this non-existent file via the contents API, it received a 404 error that killed the script entirely, leaving the actual broken cron unmonitored and the failure mode once again invisible.

0 comments Read more at DEV Community