@m13v/seo-components 0.38.1 → 0.38.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/seo-components",
-  "version": "0.38.1",
+  "version": "0.38.3",
   "scripts": {
     "build:css": "tailwind -i src/_build.css -o dist/styles.css --minify",
     "lint:mobile-spans": "node scripts/lint-mobile-spans.mjs",

package/src/components/FounderChatPanel.tsx

@@ -268,7 +268,7 @@ export function FounderChatPanel({
         <button
           type="button"
           onClick={handleOpen}
-          aria-label={`Chat with ${founderName}`}
+          aria-label="Chat with founder"
           style={{
             display: "flex",
             alignItems: "center",
@@ -301,14 +301,14 @@ export function FounderChatPanel({
           >
             {founderName.slice(0, 1).toUpperCase()}
           </span>
-          chat with {founderName}
+          chat with founder
         </button>
       )}
 
       {open && (
         <div
           role="dialog"
-          aria-label={`Chat with ${founderName}`}
+          aria-label="Chat with founder"
           style={{
             width: 360,
             maxWidth: "calc(100vw - 40px)",

package/src/lib/dm-short-link-redirect.ts

@@ -46,8 +46,17 @@ export interface DmShortLinkRedirectConfig {
  *     (Google publishes this; any real Android user is on a current device).
  *   - AI-Innovation-Radar, a named AI/news scraper.
  *   - AFMMainUI/Darwin, Apple's Ads-For-Messages link prefetch (no human tap).
+ *
+ * 2026-05-10: extended after a 24h click audit found four leak patterns
+ * sitting in the human pile:
+ *   - LinkResolver/1.0 and link-resolver/1.0 (named link-unfurl bots,
+ *     no "bot/crawler" token in the UA).
+ *   - Bare "Mozilla/5.0 (compatible)" with no engine info (no real browser
+ *     ever sends just this; spoofed minimal fingerprint).
+ *   - curl/<version> (generic HTTP client; "axios/" was already caught,
+ *     curl was missed).
  */
-const BOT_UA_RE = /bot|crawler|spider|Twitterbot|LinkedInBot|Slackbot|facebookexternalhit|Discordbot|TelegramBot|WhatsApp|Applebot|Googlebot|Bingbot|YandexBot|DuckDuckBot|redditbot|Pinterest|Embedly|Snapchat|axios\/|python-requests|python-urllib|node-fetch|^node$|dataminr|Anthill|^Mozilla\/5\.0$|Chrome\/70\.|Nexus 5X Build\/MMB29P|AI-Innovation-Radar|^AFMMainUI/i;
+const BOT_UA_RE = /bot|crawler|spider|Twitterbot|LinkedInBot|Slackbot|facebookexternalhit|Discordbot|TelegramBot|WhatsApp|Applebot|Googlebot|Bingbot|YandexBot|DuckDuckBot|redditbot|Pinterest|Embedly|Snapchat|axios\/|python-requests|python-urllib|node-fetch|^node$|dataminr|Anthill|^Mozilla\/5\.0$|Chrome\/70\.|Nexus 5X Build\/MMB29P|AI-Innovation-Radar|^AFMMainUI|LinkResolver|link-resolver|^Mozilla\/5\.0 \(compatible\)$|^curl\//i;
 
 /**
  * Factory for `GET /r/[code]`.