@networkpro/web 1.12.6 → 1.12.8

package/CHANGELOG.md

@@ -22,6 +22,74 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 ---
 
+## [1.12.8] - 2025-06-11
+
+### Added
+
+- Created `/pgp` route with `+page.svelte`, `+page.server.js`, and supporting structure.
+- Added `src/lib/pages/PGPContent.svelte` for rendering PGP key information.
+- Dynamic routing with `src/routes/pgp/[key]/+server.js` for serving `.asc` files with correct MIME type (`application/pgp-keys`).
+- Support for serving QR code images statically in `/pgp` and dynamically in `/about`.
+- Added WebP versions of QR code images in `static/pgp/` and `src/lib/img/qr/`.
+- Set up dynamic import for QR images in `/about` route via `src/lib/images.js`.
+- Enhanced accessibility styles for focus-visible states on links.
+- Improved copy-to-clipboard buttons for PGP fingerprints.
+- Defined `ContactAssets` typedef and expanded `pgpKeys` data structure for strict typing.
+- README updated with new section: `static/pgp/` Directory Structure.
+
+### Changed
+
+- Modified `/about` route to reference `/pgp` and use dynamic WebP images for PGP keys.
+- Adjusted `src/lib/meta.js` to include metadata for the `/pgp` route.
+- Canonical links in `static/bin/CC-BY-4.0.html` and `static/bin/COPYING.html` updated to reflect new paths.
+- Service worker updated to exclude `.asc` files in `/pgp`, while continuing to cache QR image assets.
+- Moved license and binary files from `static/assets` to `static/bin`.
+- File paths updated on the `/license` route to reflect the new `/bin/license` location.
+- Updated sitemap.xml.
+- Updated `.prettierignore` to ignore `static/bin/license`.
+- Updated LinkSheet download in `FossItemContent.svelte` to reference `bin/linksheet.json`.
+- Added dynamic `lsheetDl` constant in `fossData.js`.
+- Updated `TermsConditionsContent.svelte` to point to `bin/consulting-terms.pdf`.
+- Updated `LicenseContent.svelte` to:
+  - View HTML license file.
+  - Use `download` attribute for all other formats.
+- Updated `generator` meta tag to reflect `SvelteKit 2.21.4`
+- Upgraded dependencies:
+  - `@playwright/test` updated from `^1.52.0` → `^1.53.0`
+  - `@sveltejs/kit` updated from `2.21.3` → `2.21.4`
+  - `eslint-plugin-svelte` updated from `^3.9.1` → `^3.9.2`
+  - `playwright` updated from `^1.52.0` → `^1.53.0`
+  - `posthog-js` updated from `^1.249.5` → `^1.250.1`
+  - `svelte` updated from `5.33.18` → `5.33.19`
+
+### Fixed
+
+- Resolved TypeScript and JSDoc typing errors in `AboutContent.svelte` and `PGPContent.svelte`.
+- Verified fallback behavior on `/pgp/[key]` for unknown files:
+  - `.asc` files return "File not found".
+  - All others fall through to 404.
+- Adjusted `function copy(text)` with explicit JSDoc type for parameter.
+- Removed stale references to deleted assets in service worker config.
+
+---
+
+## [1.12.7] - 2025-06-09
+
+### Changed
+
+- Permissions in `playwright.yml` reduced to `contents: read` to align with least-privilege practices.
+- Renamed "Upload Playwright Report" step for clarity and naming consistency.
+- Patch version bumped to **v1.12.7** to reflect post-tag changes.
+
+### Security
+
+- Explicit `GITHUB_TOKEN` permissions added to `.github/workflows/build-and-publish.yml` to satisfy GitHub policy while preserving least-privilege.
+- Reviewed and reduced permissions in `playwright.yml` to `contents: read` as no elevated scopes are currently required.
+- Confirmed `auto-assign.yml` uses appropriate scopes for issue/PR auto-assignment (`issues: write`, `pull-requests: write`, `contents: read`).
+- Validated that `dependency-review.yml` and `backup-branch.yml` are properly scoped; no changes required.
+
+---
+
 ## [1.12.6] - 2025-06-09
 
 ### Added
@@ -181,7 +249,9 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 <!-- Link references -->
 
-[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.12.6...HEAD
+[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.12.8...HEAD
+[1.12.8]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.12.8
+[1.12.7]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.12.7
 [1.12.6]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.12.6
 [1.12.5]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.12.5
 [1.12.4]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.12.4

package/README.md

@@ -105,6 +105,33 @@ This project follows the principles of [Keep a Changelog](https://keepachangelog
 
  
 
+### 🔐 `static/pgp/` Directory Structure
+
+This directory contains public PGP key files and their corresponding QR codes.
+
+```bash
+static/
+├── pgp/
+│   ├── contact@s.neteng.pro.asc       # Public key for secure email
+│   ├── pgp-contact.png                # QR code (PNG) for secure email key
+│   ├── pgp-contact.webp               # Optimized WebP version of the QR code
+│   ├── pgp-security.png               # QR code (PNG) for security contact key
+│   ├── pgp-security.webp              # WebP version of the security QR code
+│   ├── pgp-support.png                # QR code (PNG) for support key
+│   ├── pgp-support.webp               # WebP version of the support QR code
+│   ├── security@s.neteng.pro.asc      # Public key for security contact
+│   ├── support@neteng.pro.asc         # Public key for general support
+└── ...
+```
+
+- `.asc` files are **excluded from service worker precaching** but served directly via the `/pgp/[key]` route.
+- QR code images are **served statically** by the `/pgp` route using `<picture>` elements.
+- **WebP versions** are also used in the `/pgp` route, while the `/about` route imports **dynamic equivalents** from `src/lib/img/qr`.
+- This route does **not use fallback rendering**; only explicitly defined files are available and expected to resolve.
+- A dynamic `[key]/+server.js` handler under `src/routes/pgp/` serves the `.asc` files with appropriate `Content-Type` and download headers.
+
+&nbsp;
+
 ### E2E Test Structure
 
 End-to-end tests are located in `tests/e2e/` and organized by feature or route:

package/cspell.json

@@ -33,6 +33,7 @@
     "lighthouserc",
     "lightningcss",
     "linksheet",
+    "lsheet",
     "Mailvelope",
     "Maricopa",
     "mdsvex",
@@ -51,7 +52,9 @@
     "NWPRO",
     "obtainium",
     "openpgp",
+    "opgp",
     "posthog",
+    "precaching",
     "prefs",
     "publickey",
     "reconsent",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@networkpro/web",
   "private": false,
-  "version": "1.12.6",
+  "version": "1.12.8",
   "description": "Locking Down Networks, Unlocking Confidence™ | Security, Networking, Privacy — Network Pro Strategies",
   "keywords": [
     "advisory",
@@ -80,17 +80,17 @@
   },
   "dependencies": {
     "dompurify": "^3.2.6",
-    "posthog-js": "^1.249.5",
+    "posthog-js": "^1.250.1",
     "semver": "^7.7.2",
-    "svelte": "5.33.18"
+    "svelte": "5.33.19"
   },
   "devDependencies": {
     "@eslint/compat": "^1.2.9",
     "@eslint/js": "^9.28.0",
     "@lhci/cli": "^0.15.0",
-    "@playwright/test": "^1.52.0",
+    "@playwright/test": "^1.53.0",
     "@sveltejs/adapter-netlify": "^5.0.2",
-    "@sveltejs/kit": "2.21.3",
+    "@sveltejs/kit": "2.21.4",
     "@sveltejs/vite-plugin-svelte": "5.1.0",
     "@testing-library/jest-dom": "^6.6.3",
     "@testing-library/svelte": "^5.2.8",
@@ -100,14 +100,14 @@
     "eslint": "^9.28.0",
     "eslint-config-prettier": "^10.1.5",
     "eslint-plugin-jsdoc": "^50.7.1",
-    "eslint-plugin-svelte": "^3.9.1",
+    "eslint-plugin-svelte": "^3.9.2",
     "globals": "^16.2.0",
     "jsdom": "^26.1.0",
     "lightningcss": "^1.30.1",
     "markdownlint": "^0.38.0",
     "markdownlint-cli2": "^0.18.1",
     "mdsvex": "^0.12.6",
-    "playwright": "^1.52.0",
+    "playwright": "^1.53.0",
     "postcss": "^8.5.4",
     "prettier": "^3.5.3",
     "prettier-plugin-svelte": "^3.4.0",

package/src/app.html

@@ -72,7 +72,7 @@
       content="bx4ham0zkpvzztzu213bhpt76m9siq" />
     <!-- cspell:enable -->
 
-    <meta name="generator" content="SvelteKit 2.21.3" />
+    <meta name="generator" content="SvelteKit 2.21.4" />
 
     <script src="/disableSw.js"></script>
 

package/src/lib/components/foss/FossItemContent.svelte

@@ -126,11 +126,11 @@ This file is part of Network Pro.
             ><i class="fas fa-file-arrow-down" style="margin-left: 8px;"></i
             ></span>
           <a
-            href="/assets/bin/linksheet.json"
+            href="/bin/linksheet.json"
             type="application/json"
             download
             style="margin-left: 8px;"
-            target="_blank">
+            target={PAGE.BLANK}>
             Obtainium App Config
           </a>
         </p>

package/src/lib/data/fossData.js

@@ -7,8 +7,15 @@ This file is part of Network Pro.
 ========================================================================== */
 
 // Import FOSS images
+import { base } from "$app/paths";
 import { acodePng, acodeWbp, eauthPng, eauthWbp, hboardPng, hboardWbp, lsheetPng, lsheetWbp, pmxPng, pmxWbp, squirclePng, squircleWbp, tosPng, tosWbp, urlPng, urlWbp } from "$lib";
 
+/**
+ * URL to the LinkSheet config file, using the base path
+ * @type {string}
+ */
+const lsheetDl = `${base}/bin/linksheet.json`;
+
 export const fossData = [
   {
     id: "squircle",
@@ -510,7 +517,7 @@ export const fossData = [
         hideLabels: true,  // Special flag to control rendering
         downloadText: "Obtainium App Config",
         downloadHref:
-          "https://raw.githubusercontent.com/netwk-pro/dev-sveltekit/refs/heads/master/assets/bin/linksheet.json",
+          {lsheetDl},
       },
       {
         label: "GitHub",

package/src/lib/images.js

@@ -15,7 +15,7 @@ This file is part of Network Pro.
  * @description Provides convenient access to images in the src/lib/img directory
  * @module src/lib
  * @author SunDevil311
- * @updated 2025-05-30
+ * @updated 2025-06-09
  */
 
 // Import favicon images
@@ -55,9 +55,14 @@ import urlPng from "$lib/img/posts/urlcheck.png";
 import urlWbp from "$lib/img/posts/urlcheck.webp";
 
 // Import QR code images
-import pgpContact from "$lib/img/qr/pgp-contact.png";
-import pgpSupport from "$lib/img/qr/pgp-support.png";
-import vcfSrc from "$lib/img/qr/vcard.png";
+import pgpContactPng from "$lib/img/qr/pgp-contact.png";
+import pgpContactWbp from "$lib/img/qr/pgp-contact.webp";
+import pgpSecurityPng from "$lib/img/qr/pgp-security.png";
+import pgpSecurityWbp from "$lib/img/qr/pgp-security.webp";
+import pgpSupportPng from "$lib/img/qr/pgp-support.png";
+import pgpSupportWbp from "$lib/img/qr/pgp-support.webp";
+import vcfPng from "$lib/img/qr/vcard.png";
+import vcfWbp from "$lib/img/qr/vcard.webp";
 
 // Re-export all imports
 export {
@@ -79,9 +84,10 @@ export {
   lsheetWbp,
   obtainiumPng,
   obtainiumWbp,
-  pgpContact,
-  pgpSupport,
-  pmxPng,
+  pgpContactPng,
+  pgpContactWbp, pgpSecurityPng,
+  pgpSecurityWbp, pgpSupportPng,
+  pgpSupportWbp, pmxPng,
   pmxWbp,
   squirclePng,
   squircleWbp,
@@ -89,7 +95,8 @@ export {
   tosWbp,
   urlPng,
   urlWbp,
-  vcfSrc
+  vcfPng,
+  vcfWbp
 };
 
 // cspell:ignore eauth hboard

package/src/lib/meta.js

@@ -56,6 +56,11 @@ const meta = {
     description:
       "Privacy Dashboard | Security, Networking, Privacy — Network Pro™",
   },
+  "/pgp": {
+    title: "Public PGP Keys — Network Pro™",
+    description:
+      "Public encryption keys for secure communication | Security, Networking, Privacy — Network Pro™",
+  },
   // Excludes redirect-only routes like /contact, /consultation, /privacy-rights
 };
 

package/src/lib/pages/AboutContent.svelte

@@ -7,14 +7,21 @@ This file is part of Network Pro.
 ========================================================================== -->
 
 <script>
-  import { pgpContact, pgpSupport, vcfSrc } from "$lib";
+  import {
+    pgpContactPng,
+    pgpContactWbp,
+    pgpSupportPng,
+    pgpSupportWbp,
+    vcfPng,
+    vcfWbp,
+  } from "$lib";
   import { base } from "$app/paths";
   import { CONSTANTS } from "$lib";
 
   // Log the base path to verify its value
   //console.log("Base path:", base);
 
-  console.log(CONSTANTS.COMPANY_INFO.APP_NAME);
+  //console.log(CONSTANTS.COMPANY_INFO.APP_NAME);
 
   const { COMPANY_INFO, PAGE } = CONSTANTS;
 
@@ -24,6 +31,12 @@ This file is part of Network Pro.
    */
   const contactLink = `${base}/contact`;
 
+  /**
+   * URL to the PGP route, using the base path
+   * @type {string}
+   */
+  const pgpLink = `${base}/pgp`;
+
   /**
    * HTML attribute for async image decoding
    * @type {"async" | "sync" | "auto"}
@@ -70,6 +83,7 @@ This file is part of Network Pro.
    * @type {Array<{
    *   label: string,
    *   qrSrc: string,
+   *   qrWbp: string,
    *   keySearch: string,
    *   fingerprint: string[]
    * }>}
@@ -77,13 +91,15 @@ This file is part of Network Pro.
   const pgpKeys = [
     {
       label: "support@neteng.pro",
-      qrSrc: pgpSupport,
+      qrSrc: pgpSupportPng,
+      qrWbp: pgpSupportWbp,
       keySearch: "https://keys.openpgp.org/search?q=support%40neteng.pro",
       fingerprint: ["6590B992E2E3EFF12738", "7BCE2AF093E9DEC61BA0"],
     },
     {
       label: "contact@s.neteng.pro",
-      qrSrc: pgpContact,
+      qrSrc: pgpContactPng,
+      qrWbp: pgpContactWbp,
       keySearch: "https://keys.openpgp.org/search?q=contact%40s.neteng.pro",
       fingerprint: ["DF118BAA6C2D9DCDEBDC", "2DDCF99373499495F957"],
     },
@@ -91,18 +107,20 @@ This file is part of Network Pro.
 
   /**
    * @typedef {Object} ContactAssets
-   * @property {string} vcf - Path to the contact vCard (.vcf file)
-   * @property {string} qrSrc - Path to QR image for contact info
-   * @property {string} supportAsc - Support PGP public key file (.asc)
-   * @property {string} contactAsc - Contact PGP public key file (.asc)
+   * @property {string} vcf
+   * @property {string} qrSrc
+   * @property {string} qrWbp
+   * @property {string} supportAsc
+   * @property {string} contactAsc
    */
 
   /** @type {ContactAssets} */
   const contactAssets = {
-    vcf: "/assets/bin/contact.vcf",
-    qrSrc: vcfSrc,
-    supportAsc: "/assets/bin/support@neteng.pro.asc",
-    contactAsc: "/assets/bin/contact@s.neteng.pro.asc",
+    vcf: "/bin/contact.vcf",
+    qrSrc: vcfPng,
+    qrWbp: vcfWbp,
+    supportAsc: "/pgp/support@neteng.pro.asc",
+    contactAsc: "/pgp/contact@s.neteng.pro.asc",
   };
 </script>
 
@@ -210,8 +228,11 @@ This file is part of Network Pro.
 <div class="spacer"></div>
 
 <p>
-  You can find our PGP keys and a vCard containing our contact information
-  below.
+  You can find our PGP keys and a downloadable vCard with contact information
+  below. For a complete list of public keys, visit the <a
+    href={pgpLink}
+    target={PAGE.SELF}>dedicated PGP page</a
+  >.
 </p>
 
 <!-- BEGIN PGP KEYS -->
@@ -221,12 +242,15 @@ This file is part of Network Pro.
       <!-- Row 0 (First row) remains unchanged -->
       <tr>
         <td class="pgp-col1">
-          <img
-            {decoding}
-            {loading}
-            src={pgpKeys[0].qrSrc}
-            class="pgp-image"
-            alt={`PGP Key - ${pgpKeys[0].label}`} />
+          <picture>
+            <source srcset={pgpKeys[0].qrWbp} type="image/webp" />
+            <img
+              {decoding}
+              {loading}
+              src={pgpKeys[0].qrSrc}
+              class="pgp-image"
+              alt={`PGP Key - ${pgpKeys[0].label}`} />
+          </picture>
         </td>
         <td class="pgp-col2">
           <a rel={PAGE.REL} href={pgpKeys[0].keySearch} target={PAGE.BLANK}>
@@ -275,24 +299,30 @@ This file is part of Network Pro.
           </p>
         </td>
         <td class="pgp-col2">
-          <img
-            {decoding}
-            {loading}
-            src={pgpKeys[1].qrSrc}
-            class="pgp-image"
-            alt={`PGP Key - ${pgpKeys[1].label}`} />
+          <picture>
+            <source srcset={pgpKeys[1].qrWbp} type="image/webp" />
+            <img
+              {decoding}
+              {loading}
+              src={pgpKeys[1].qrSrc}
+              class="pgp-image"
+              alt={`PGP Key - ${pgpKeys[1].label}`} />
+          </picture>
         </td>
       </tr>
 
       <!-- Row 2 (Third row) remains unchanged -->
       <tr>
         <td class="pgp-col1">
-          <img
-            {decoding}
-            {loading}
-            src={contactAssets.qrSrc}
-            class="pgp-image"
-            alt="vCard" />
+          <picture>
+            <source srcset={contactAssets.qrWbp} type="image/webp" />
+            <img
+              {decoding}
+              {loading}
+              src={contactAssets.qrSrc}
+              class="pgp-image"
+              alt="vCard" />
+          </picture>
         </td>
         <td class="pgp-col2">
           <strong>vCard</strong>

package/src/lib/pages/LicenseContent.svelte

@@ -218,22 +218,19 @@ This file is part of Network Pro.
       </ul>
     {:else if link.id === "cc-by"}
       <p class={constants.classSmall}>
-        Download:
-        <a href="/assets/license/CC-BY-4.0.html" download target={PAGE.BLANK}
-          >HTML</a>
+        View / Download:
+        <a href="/bin/license/CC-BY-4.0.html" target={PAGE.BLANK}>HTML</a>
         |
-        <a href="/assets/license/CC-BY-4.0.md" download target={PAGE.BLANK}
+        <a href="/bin/license/CC-BY-4.0.md" download target={PAGE.BLANK}
           >Markdown</a>
         |
-        <a href="/assets/license/CC-BY-4.0.txt" download target={PAGE.BLANK}
+        <a href="/bin/license/CC-BY-4.0.txt" download target={PAGE.BLANK}
           >Text</a>
         |
-        <a
-          href="/assets/license/CC-BY-4.0-rdfa.xml"
-          download
-          target={PAGE.BLANK}>RDFa</a>
+        <a href="/bin/license/CC-BY-4.0-rdfa.xml" download target={PAGE.BLANK}
+          >RDFa</a>
         |
-        <a href="/assets/license/CC-BY-4.0.xml" download target={PAGE.BLANK}
+        <a href="/bin/license/CC-BY-4.0.xml" download target={PAGE.BLANK}
           >XMP</a>
       </p>
 
@@ -314,21 +311,18 @@ This file is part of Network Pro.
       </code>
     {:else if link.id === "gnu-gpl"}
       <p class={constants.classSmall}>
-        Download:
-        <a href="/assets/license/COPYING.html" download target={PAGE.BLANK}
-          >HTML</a>
+        View / Download:
+        <a href="/bin/license/COPYING.html" target={PAGE.BLANK}>HTML</a>
         |
-        <a href="/assets/license/COPYING.md" download target={PAGE.BLANK}
+        <a href="/bin/license/COPYING.md" download target={PAGE.BLANK}
           >Markdown</a>
         |
-        <a href="/assets/license/COPYING.txt" download target={PAGE.BLANK}
-          >Text</a>
+        <a href="/bin/license/COPYING.txt" download target={PAGE.BLANK}>Text</a>
         |
-        <a href="/assets/license/COPYING-rdfa.xml" download target={PAGE.BLANK}
+        <a href="/bin/license/COPYING-rdfa.xml" download target={PAGE.BLANK}
           >RDFa</a>
         |
-        <a href="/assets/license/COPYING.odt" download target={PAGE.BLANK}
-          >ODT</a>
+        <a href="/bin/license/COPYING.odt" download target={PAGE.BLANK}>ODT</a>
       </p>
 
       <p>

package/src/lib/pages/PGPContent.svelte

@@ -0,0 +1,110 @@
+<!-- ==========================================================================
+src/lib/pages/PGPContent.svelte
+
+Copyright © 2025 Network Pro Strategies (Network Pro™)
+SPDX-License-Identifier: CC-BY-4.0 OR GPL-3.0-or-later
+This file is part of Network Pro.
+========================================================================== -->
+
+<script>
+  import { base } from "$app/paths";
+  import { CONSTANTS } from "$lib";
+
+  // Log the base path to verify its value
+  //console.log("Base path:", base);
+
+  //console.log(CONSTANTS.COMPANY_INFO.APP_NAME);
+
+  const { COMPANY_INFO, PAGE } = CONSTANTS;
+
+  const keys = [
+    {
+      name: "General Contact & Support",
+      email: "support (at) neteng.pro",
+      fingerprint: "6590 B992 E2E3 EFF1 2738 7BCE 2AF0 93E9 DEC6 1BA0",
+      opgp: "https://keys.openpgp.org/search?q=support%40neteng.pro",
+      file: "/pgp/support@neteng.pro.asc",
+      img: "pgp-support",
+    },
+    {
+      name: "Secure Email",
+      email: "contact (at) s.neteng.pro",
+      fingerprint: "DF11 8BAA 6C2D 9DCD EBDC 2DDC F993 7349 9495 F957",
+      opgp: "https://keys.openpgp.org/search?q=contact%40s.neteng.pro",
+      file: "/pgp/contact@s.neteng.pro.asc",
+      img: "pgp-contact",
+    },
+    {
+      name: "Security Contact",
+      email: "security (at) s.neteng.pro",
+      fingerprint: "B7FE 1D4E 6CAB 3E71 4A9F DF6E 48CB 7290 C00D 0DA5",
+      opgp: null,
+      file: "/pgp/security@s.neteng.pro.asc",
+      img: "pgp-security",
+    },
+  ];
+
+  /**
+   * Copy a string to the clipboard
+   * @param {string} text
+   */
+  function copy(text) {
+    navigator.clipboard.writeText(text);
+  }
+</script>
+
+<h1>🔐 Public PGP Keys</h1>
+<p
+  >Below are our public encryption keys. Use them to securely send email or
+  verify signed messages.</p>
+
+{#each keys as key}
+  <section class="pgp-entry" aria-labelledby={`pgp-${key.img}`}>
+    <div class="pgp-text">
+      <h2 id={`pgp-${key.img}`}>{key.name}</h2>
+      <h3>
+        &lt;
+        {#if key.opgp}
+          <a rel={PAGE.REL} href={key.opgp} target={PAGE.BLANK}>
+            {key.email}
+          </a>
+        {:else}
+          {key.email}
+        {/if}
+        &gt;
+      </h3>
+      <pre><code>{key.fingerprint}</code></pre>
+      <p>
+        <button
+          type="button"
+          on:click={() => copy(key.fingerprint)}
+          aria-label={`Copy PGP fingerprint for ${key.name}`}
+          title="Copy fingerprint to clipboard">
+          Copy fingerprint
+        </button>
+      </p>
+      <p>
+        <a
+          href={key.file}
+          download
+          aria-label={`Download PGP key for ${key.name}`}
+          title="Download PGP key">
+          Download Key
+        </a>
+      </p>
+    </div>
+    <div class="pgp-qr">
+      <picture>
+        <source srcset={`/pgp/${key.img}.webp`} type="image/webp" />
+        <img
+          src={`/pgp/${key.img}.png`}
+          alt={`QR code for ${key.email}`}
+          loading="lazy"
+          decoding="async"
+          style="width: 150px; height: 150px;" />
+      </picture>
+    </div>
+  </section>
+{/each}
+
+<!-- cspell:ignore ebdc -->

package/src/lib/pages/TermsConditionsContent.svelte

@@ -112,7 +112,7 @@ This file is part of Network Pro.
       |
       <a href={tandcLink} target={PAGE.SELF}>Docs</a>
       |
-      <a href="/assets/consulting-terms.pdf" target={PAGE.BLANK}>
+      <a href="/bin/consulting-terms.pdf" download target={PAGE.BLANK}>
         PDF <span class="fas fa-file-arrow-down"></span>
       </a>
     </sup>