@networkpro/web 1.22.2 → 1.24.0

package/.github/workflows/build-and-publish.yml

@@ -38,7 +38,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           cache: npm
           cache-dependency-path: package-lock.json
 
@@ -123,7 +123,7 @@ jobs:
       - name: Set up Node.js for npmjs
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://registry.npmjs.org/
           cache: npm
           cache-dependency-path: package-lock.json
@@ -184,7 +184,7 @@ jobs:
       - name: Set up Node.js for GPR
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://npm.pkg.github.com/
           cache: npm
           cache-dependency-path: package-lock.json

package/.github/workflows/lighthouse.yml

@@ -44,7 +44,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           cache: npm
           cache-dependency-path: package-lock.json
 

package/.github/workflows/meta-check.yml

@@ -25,7 +25,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
 
       - name: Install dependencies
         run: npm ci

package/.github/workflows/publish-test.yml

@@ -36,7 +36,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           cache: npm
           cache-dependency-path: package-lock.json
 
@@ -121,7 +121,7 @@ jobs:
       - name: Set up Node.js for npmjs
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://registry.npmjs.org/
           cache: npm
           cache-dependency-path: package-lock.json
@@ -182,7 +182,7 @@ jobs:
       - name: Set up Node.js for GPR
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://npm.pkg.github.com/
           cache: npm
           cache-dependency-path: package-lock.json

package/.github/workflows/secret-scan.yml

@@ -0,0 +1,105 @@
+# .github/workflows/secret-scan.yml
+#
+# Copyright © 2025 Network Pro Strategies (Network Pro™)
+# SPDX-License-Identifier: CC-BY-4.0 OR GPL-3.0-or-later
+# This file is part of Network Pro
+
+name: Secret Scan (Gitleaks)
+
+on:
+  pull_request:
+  schedule:
+    - cron: '0 8 * * *' # nightly scan at 8 AM UTC
+  workflow_dispatch:
+
+jobs:
+  gitleaks-scan:
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      security-events: write
+    steps:
+      # ---------------------------------------------------------------------
+      # Checkout the full repo history (needed for Gitleaks to scan all commits)
+      # ---------------------------------------------------------------------
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      # ---------------------------------------------------------------------
+      # Run Gitleaks scan
+      # Uses org license key (safe because GitHub never passes secrets to forks)
+      # ---------------------------------------------------------------------
+      - name: Run Gitleaks scan
+        id: gitleaks
+        uses: gitleaks/gitleaks-action@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}
+          GITLEAKS_REPORT_PATH: gitleaks-report.json
+
+      # ---------------------------------------------------------------------
+      # LAYER 2: Secret-handling / fork guard
+      # Upload artifact only if workflow runs in trusted context
+      # (either not a PR, or a PR from the same repo)
+      # ---------------------------------------------------------------------
+      - name: Upload Gitleaks Report
+        if: always() && (github.event.pull_request.head.repo.full_name == github.repository || github.event_name != 'pull_request')
+        uses: actions/upload-artifact@v4
+        with:
+          name: gitleaks-report
+          path: gitleaks-report.json
+
+      # ---------------------------------------------------------------------
+      # LAYER 1: Output redaction
+      # Public-safe summary – shows only secret descriptions, hides file paths.
+      # ---------------------------------------------------------------------
+      - name: Post Gitleaks summary
+        if: always()
+        run: |
+          echo "### 🧩 Gitleaks Scan Summary" >> $GITHUB_STEP_SUMMARY
+          if [ -s gitleaks-report.json ]; then
+            count=$(jq '.findings | length' gitleaks-report.json)
+            if [ "$count" -gt 0 ]; then
+              echo "🚨 **$count potential secret$( [ "$count" -ne 1 ] && echo "s" ) detected!**" >> $GITHUB_STEP_SUMMARY
+              echo "" >> $GITHUB_STEP_SUMMARY
+              # 🔒 Redacted output: no file paths or secret values
+              jq -r '.findings[] | "- \(.Description) (at undisclosed path)"' gitleaks-report.json | head -n 10 >> $GITHUB_STEP_SUMMARY
+              echo "" >> $GITHUB_STEP_SUMMARY
+              echo "_Full report available in Artifacts section (maintainers only)._ " >> $GITHUB_STEP_SUMMARY
+            else
+              echo "✅ No secrets detected." >> $GITHUB_STEP_SUMMARY
+            fi
+          else
+            echo "⚠️ No report file found." >> $GITHUB_STEP_SUMMARY
+          fi
+
+      # ---------------------------------------------------------------------
+      # LAYER 2: Secret-handling / fork guard
+      # Create issue only in trusted repo context (avoids using tokens on forks)
+      # ---------------------------------------------------------------------
+      - name: Create issue for detected secrets
+        if: failure() && (github.event.pull_request.head.repo.full_name == github.repository || github.event_name != 'pull_request')
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const issueTitle = `🚨 Secret(s) detected in ${context.repo.repo}`;
+            const issueBody = `Gitleaks found potential secrets in commit ${context.sha}.\n\nCheck workflow logs and artifacts for details.`;
+            await github.rest.issues.create({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              title: issueTitle,
+              body: issueBody,
+              labels: ['security', 'gitleaks']
+            });
+
+      # ---------------------------------------------------------------------
+      # LAYER 2: Secret-handling / fork guard
+      # Send ntfy alert only for trusted repo context.
+      # ---------------------------------------------------------------------
+      - name: Send ntfy notification
+        if: failure() && (github.event.pull_request.head.repo.full_name == github.repository || github.event_name != 'pull_request')
+        run: |
+          curl -d "🚨 Gitleaks found secrets in repo: $GITHUB_REPOSITORY on commit $GITHUB_SHA" \
+               https://ntfy.neteng.pro/${{ secrets.NTFY_TOPIC }}

package/.github/workflows/templates/publish.template.yml

@@ -46,7 +46,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           cache: npm
           cache-dependency-path: package-lock.json
 
@@ -131,7 +131,7 @@ jobs:
       - name: Set up Node.js for npmjs
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://registry.npmjs.org/
           cache: npm
           cache-dependency-path: package-lock.json
@@ -192,7 +192,7 @@ jobs:
       - name: Set up Node.js for GPR
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://npm.pkg.github.com/
           cache: npm
           cache-dependency-path: package-lock.json

package/.node-version

@@ -1 +1 @@
-22.21.0
+24.11.0

package/.nvmrc

@@ -1 +1 @@
-22.21.0
+24.11.0

package/CHANGELOG.md

@@ -22,6 +22,99 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 ---
 
+## [1.24.0]
+
+### Added
+
+- Introduced [GitLeaks](https://github.com/gitleaks/gitleaks-action) secret scan CI action as `.github/workflows/secret-scan.yml`.
+- Introduced two-phase scan strategy:
+  - **Pull Request scans** to detect secrets before merge.
+  - **Nightly scheduled scans** (`cron: "0 4 * * *"`) for full-history coverage.
+- Added **artifact upload** for the `gitleaks-report.json` file, allowing maintainers to download complete results from the Actions UI.
+- Implemented **public-safe summary output** in `$GITHUB_STEP_SUMMARY`:
+  - Displays secret descriptions only.
+  - Redacts file paths and other sensitive details.
+  - Provides a concise, readable summary of findings.
+- Added **GitHub Issue creation step** to automatically open a security issue when leaks are detected.
+- Integrated optional **ntfy.sh notifications** for real-time alerting on secret leaks.
+- Implemented **fork-safety guards** to prevent workflows triggered from untrusted forks from:
+  - Accessing organization secrets (license keys, ntfy topic).
+  - Uploading artifacts or creating issues.
+- Added descriptive comments and logical layer separation:
+  - **Layer 1 – Output Redaction**
+  - **Layer 2 – Secret / Fork Handling**
+
+### Changed
+
+- Bumped project version to `v1.23.1`.
+- Updated `.node-version` and `.nvmrc` to utilize **Node.js** `24.11.0` (LTS).
+- Updated CI workflows to utilize `node-version: 24`:
+  - `build-and-publish.yml`
+  - `lighthouse.yml`
+  - `meta-check.yml`
+  - `playwright.yml`
+  - `publish-test.yml`
+  - `templates/publish.template.yml`
+- Updated dependencies:
+  - `@eslint/js` `^9.38.0` → `^9.39.0`
+  - `eslint` `^9.38.0` → `^9.39.0`
+  - `globals` `^16.4.0` → `^16.5.0`
+  - `posthog-js` `^1.282.0` → `^1.284.0`
+
+---
+
+## [1.23.0] - 2025-10-30
+
+### Documentation
+
+- Updated `src/lib/README.md` to reflect newly added app constants.
+
+### Changed
+
+- Refactored all route files to use named imports from `$lib/components` and `$lib/pages` barrel modules, replacing individual `.svelte` imports for improved consistency and maintainability.
+- Changed `COMPANY_INFO.APP_NAME` constant to `Network Pro™` in `src/lib/index.js`.
+  - Removed unnecessary `™` symbol from files that utilize the app constant.
+- Changed `/license` and `/foss-spotlight` routes to `/legal` and `/foss`, respectively, for more intuitive navigation.
+  - Updated all references to the new routes, `/legal` and `/foss`.
+  - Updated `vercel.json` to redirect `/license` to `/legal`, and `/foss-spotlight` to `/foss`.
+- Refactored Playwright helper utilities to modern standards:
+  - Replaced deprecated `page.waitForNavigation()` with `waitForURL()` and `waitForLoadState()` in `clickAndWaitForNavigation()` for improved SPA and full-page navigation reliability.
+  - Simplified logic and removed unsupported `lastResponse()` usage.
+  - Improved test stability for mobile navigation (especially in CI environments).
+- Modified `tests/unit/server/meta.test.js` to match on `Locking Down Networks`, rather than `Network Pro`, which is now dynamically attached.
+- Refreshed **Last Modified** timestamps in `static/sitemap.xml`.
+- Updated `.node-version` and `.nvmrc` to utilize **Node.js** `22.21.1` (LTS).
+- Updated generator metadata in `src/app.html` to reflect **SvelteKit 2.48.4**.
+- Bumped project version to `v1.23.0`.
+- Updated dependencies:
+  - `@sveltejs/kit` `2.48.3` → `2.48.4`
+  - `svelte` `5.43.0` → `5.43.2`
+  - `eslint-plugin-svelte` `^3.12.5` → `^3.13.0`
+
+- Refactored metadata and SEO handling for consistency and maintainability:
+  - Centralized all `<meta>` and `<title>` management in `src/lib/components/MetaTags.svelte`.
+  - Removed redundant per-page `<svelte:head>` entries and `MetaTags` imports in individual `+page.svelte` files.
+  - Added dynamic canonical URL generation using route `pathname` from `+layout.js`.
+  - Implemented automatic title and description suffixing:
+    - Titles now end with `— Network Pro™`.
+    - Descriptions now end with `| Security, Networking, Privacy — Network Pro Strategies`.
+  - Cleaned up fallback values (`defaultTitle`, `defaultDescription`, `defaultMeta`) to prevent redundant branding text.
+  - Adjusted layout structure to ensure correct canonical and OpenGraph metadata per route.
+
+- Updated `src/app.html`:
+  - Removed duplicate document sections and placeholder meta tags.
+  - Verified correct `%sveltekit.head%` placement for dynamic head injection.
+  - Moved static PWA-related metadata (e.g., `<meta name="theme-color">`) into `app.html`.
+  - Retained dynamic icons and preload links for cache-busted assets via `+layout.svelte`.
+
+### Security
+
+- Added transitive dependency overrides to address reported vulnerabilities:
+  - `tar@7.5.1` → `tar@7.5.2` (fixes CVE-2025-64118: race condition/uninitialized memory exposure).
+- Confirmed overrides applied correctly via `npm ls` and `npm explain`.
+
+---
+
 ## [1.22.2] - 2025-10-29
 
 ### Documentation
@@ -1310,7 +1403,9 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 <!-- Link references -->
 
-[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.22.2...HEAD
+[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.24.0...HEAD
+[1.24.0]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.24.0
+[1.23.0]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.23.0
 [1.22.2]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.22.2
 [1.22.1]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.22.1
 [1.22.0]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.22.0

package/LICENSE.md

@@ -45,7 +45,7 @@ This document is provided for convenience only. In the event of any discrepancy,
 
 ---
 
-**Formats Available:** [HTML](https://netwk.pro/license) | Markdown
+**Formats Available:** [HTML](https://netwk.pro/legal) | Markdown
 
 <a name="ownership"></a>
 

package/README.md

@@ -465,11 +465,11 @@ Refer to the Wiki for:
 
 This project is licensed under:
 
-- [Creative Commons BY 4.0](https://netwk.pro/license#cc-by)
+- [Creative Commons BY 4.0](https://netwk.pro/legal#cc-by)
 
-- Or optionally, [GNU GPL v3 or later](https://netwk.pro/license#gnu-gpl)
+- Or optionally, [GNU GPL v3 or later](https://netwk.pro/legal#gnu-gpl)
 
-Source code, branding, and visual assets are subject to reuse and distribution terms specified on our [Legal, Copyright, and Licensing page](https://netwk.pro/license).
+Source code, branding, and visual assets are subject to reuse and distribution terms specified on our [Legal, Copyright, and Licensing page](https://netwk.pro/legal).
 
 </section>
 
@@ -499,9 +499,9 @@ _Designed for professionals. Hardened for privacy. Built with intent._
 Copyright &copy; 2025  
 **[Network Pro Strategies](https://netwk.pro) (Network Pro&trade;)**
 
-Network Pro&trade;, the shield logo, and the "Locking Down Networks...&trade;" slogan are [trademarks](https://netwk.pro/license#trademark) of Network Pro Strategies.
+Network Pro&trade;, the shield logo, and the "Locking Down Networks...&trade;" slogan are [trademarks](https://netwk.pro/legal#trademark) of Network Pro Strategies.
 
-Licensed under **[CC BY 4.0](https://netwk.pro/license#cc-by)** and the **[GNU GPL](https://netwk.pro/license#gnu-gpl)**, as published by the [Free Software Foundation](https://www.fsf.org), either version 3 of the License, or (at your option) any later version.
+Licensed under **[CC BY 4.0](https://netwk.pro/legal#cc-by)** and the **[GNU GPL](https://netwk.pro/legal#gnu-gpl)**, as published by the [Free Software Foundation](https://www.fsf.org), either version 3 of the License, or (at your option) any later version.
 
 </span>
 

package/budget.json

@@ -21,7 +21,7 @@
     ]
   },
   {
-    "path": "/foss-spotlight",
+    "path": "/foss",
     "resourceSizes": [
       { "resourceType": "image", "budget": 500 },
       { "resourceType": "total", "budget": 1200 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@networkpro/web",
   "private": false,
-  "version": "1.22.2",
+  "version": "1.24.0",
   "description": "Locking Down Networks, Unlocking Confidence™ | Security, Networking, Privacy — Network Pro Strategies",
   "keywords": [
     "advisory",
@@ -79,28 +79,28 @@
   },
   "dependencies": {
     "dompurify": "^3.3.0",
-    "posthog-js": "^1.282.0",
+    "posthog-js": "^1.284.0",
     "semver": "^7.7.3",
-    "svelte": "5.43.0"
+    "svelte": "5.43.2"
   },
   "devDependencies": {
     "@eslint/compat": "^1.4.1",
-    "@eslint/js": "^9.38.0",
+    "@eslint/js": "^9.39.0",
     "@lhci/cli": "^0.15.1",
     "@playwright/test": "^1.56.1",
     "@sveltejs/adapter-vercel": "^6.1.1",
-    "@sveltejs/kit": "2.48.3",
+    "@sveltejs/kit": "2.48.4",
     "@sveltejs/vite-plugin-svelte": "^6.2.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/svelte": "^5.2.8",
     "@vitest/coverage-v8": "3.2.4",
     "autoprefixer": "^10.4.21",
     "browserslist": "^4.27.0",
-    "eslint": "^9.38.0",
+    "eslint": "^9.39.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-jsdoc": "^61.1.11",
-    "eslint-plugin-svelte": "^3.12.5",
-    "globals": "^16.4.0",
+    "eslint-plugin-svelte": "^3.13.0",
+    "globals": "^16.5.0",
     "jsdom": "26.1.0",
     "lightningcss": "^1.30.2",
     "markdownlint": "^0.39.0",
@@ -124,7 +124,8 @@
     "vitest": "3.2.4"
   },
   "overrides": {
-    "tmp": ">=0.2.4",
-    "cookie": "^1.0.0"
+    "cookie": "^1.0.0",
+    "tar": "7.5.2",
+    "tmp": ">=0.2.4"
   }
 }

package/src/app.html

@@ -10,12 +10,12 @@
     This file is part of Network Pro.
     ====================================================================== -->
 
-    <title>%sveltekit.title%</title>
-    <meta name="description" content="%sveltekit.description%" />
+    <!-- ✅ DO NOT include any <title> or <meta name="description"> tags here
+         Titles and metadata are managed by SvelteKit via MetaTags.svelte -->
+
     <meta
       name="robots"
       content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1" />
-    <meta name="author" content="Scott Lopez" />
 
     <!-- Favicon: Keep only ICO for max compatibility -->
     <link
@@ -53,7 +53,7 @@
       content="bx4ham0zkpvzztzu213bhpt76m9siq" />
     <!-- cspell:enable -->
 
-    <meta name="generator" content="SvelteKit 2.48.3" />
+    <meta name="generator" content="SvelteKit 2.48.4" />
 
     <script src="/disableSw.js"></script>
 

package/src/lib/README.md

@@ -84,17 +84,20 @@ console.log(CONSTANTS.COMPANY_INFO.APP_NAME); // "Network Pro"
 | Key        | Description                  | Example                  |
 | ---------- | ---------------------------- | ------------------------ |
 | `NAME`     | Full company name            | `Network Pro Strategies` |
-| `APP_NAME` | Application or branding name | `Network Pro`            |
+| `APP_NAME` | Application or branding name | `Network Pro™`          |
 | `YEAR`     | Copyright / app year         | `2025`                   |
 
 ### 📬 CONTACT
 
-| Key       | Description             | Example                     |
-| --------- | ----------------------- | --------------------------- |
-| `EMAIL`   | General support email   | `support (at) neteng.pro`   |
-| `SECURE`  | Secure contact address  | `contact (at) s.neteng.pro` |
-| `PRIVACY` | Privacy-related contact | `privacy (at) netwk.pro`    |
-| `PHONE`   | Company phone number    | `(623) 252-4350`            |
+| Key            | Description                    | Example                     |
+| -------------- | ------------------------------ | --------------------------- |
+| `EMAIL`        | General support email          | `support (at) netwk.pro`    |
+| `EMAIL_LINK`   | General support email (link)   | `support@netwk.pro`         |
+| `SECURE`       | Secure contact address         | `contact (at) s.neteng.pro` |
+| `SECURE_LINK`  | Secure contact address (link)  | `contact@s.neteng.pro`      |
+| `PRIVACY`      | Privacy-related contact        | `privacy (at) netwk.pro`    |
+| `PRIVACY_LINK` | Privacy-related contact (link) | `privacy@netwk.pro`         |
+| `PHONE`        | Company phone number           | `(623) 252-4350`            |
 
 ### 🗂️ PAGE
 
@@ -153,8 +156,8 @@ No need to modify imports when adding new images — just add them to `images.js
 Copyright © 2025  
 **[Network Pro Strategies](https://netwk.pro) (Network Pro™)**
 
-Network Pro™, the shield logo, and the "Locking Down Networks...™" slogan are [trademarks](https://netwk.pro/license#trademark) of Network Pro Strategies.
+Network Pro™, the shield logo, and the "Locking Down Networks...™" slogan are [trademarks](https://netwk.pro/legal#trademark) of Network Pro Strategies.
 
-Licensed under **[CC BY 4.0](https://netwk.pro/license#cc-by)** and the **[GNU GPL](https://netwk.pro/license#gnu-gpl)**, as published by the [Free Software Foundation](https://www.fsf.org), either version 3 of the License, or (at your option) any later version.
+Licensed under **[CC BY 4.0](https://netwk.pro/legal#cc-by)** and the **[GNU GPL](https://netwk.pro/legal#gnu-gpl)**, as published by the [Free Software Foundation](https://www.fsf.org), either version 3 of the License, or (at your option) any later version.
 
 </span>

package/src/lib/components/Badges.svelte

@@ -19,8 +19,8 @@ This file is part of Network Pro.
 
   const { PAGE } = CONSTANTS;
 
-  const ccbyLink = `${base}/license#cc-by`;
-  const gplLink = `${base}/license#gnu-gpl`;
+  const ccbyLink = `${base}/legal#cc-by`;
+  const gplLink = `${base}/legal#gnu-gpl`;
 
   /**
    * Badge link object.

package/src/lib/components/LegalNav.svelte

@@ -19,7 +19,7 @@ This file is part of Network Pro.
 
   const termsLink = `${base}/terms-of-use`;
   const privacyLink = `${base}/privacy`;
-  const licenseLink = `${base}/license`;
+  const licenseLink = `${base}/legal`;
   const pdashLink = `${base}/privacy-dashboard`;
 
   /**

package/src/lib/components/MetaTags.svelte

@@ -9,6 +9,9 @@ This file is part of Network Pro.
 <script>
   export let title;
   export let description;
+  export let url = 'https://netwk.pro';
+  export let image = `${url}/img/banner-og-1200x630.png`;
+  export let pathname = '';
 
   import { CONSTANTS } from '$lib';
 
@@ -16,33 +19,56 @@ This file is part of Network Pro.
 
   const { COMPANY_INFO, LINKS } = CONSTANTS;
 
+  // Default fallbacks (for missing or undefined props)
+  const defaultTitle = 'Security, Networking, Privacy';
+  const defaultDescription = 'Locking Down Networks, Unlocking Confidence™';
+
+  // computed title/description with fallback
+  $: metaTitle = title
+    ? `${title}${title.includes(COMPANY_INFO.APP_NAME) ? '' : ` — ${COMPANY_INFO.APP_NAME}`}`
+    : defaultTitle;
+
+  $: metaDescription = description
+    ? `${description}${description.includes(COMPANY_INFO.NAME) ? '' : ` | Security, Networking, Privacy — ${COMPANY_INFO.NAME}`}`
+    : defaultDescription;
+
+  // Compute canonical URL
+  $: canonicalUrl = pathname
+    ? `${url.replace(/\/$/, '')}${pathname.startsWith('/') ? pathname : `/${pathname}`}`
+    : url;
+
   // Static shared values
-  const ogUrl = LINKS.HOME;
-  const ogImg = '/img/banner-og-1200x630.png';
-  const companyName = COMPANY_INFO.NAME;
   const twitterAct = '@NetEng_Pro';
 </script>
 
 <svelte:head>
-  <title>{title}</title>
-  <meta name="description" content={description} />
+  <title>{metaTitle}</title>
+  <meta name="description" content={metaDescription} />
 
   <!-- OpenGraph -->
-  <meta property="og:title" content={title} />
+  <meta property="og:title" content={metaTitle} />
+  <meta property="og:description" content={metaDescription} />
+  <meta property="og:url" content={url} />
   <meta property="og:type" content="website" />
-  <meta property="og:url" content={ogUrl} />
-  <meta property="og:image" content={ogImg} />
-  <meta property="og:image:alt" content={companyName} />
-  <meta property="og:description" content={description} />
+  <meta property="og:site_name" content={COMPANY_INFO.APP_NAME} />
+  <meta property="og:image" content={image} />
+  <meta property="og:image:alt" content={COMPANY_INFO.NAME} />
+  <meta property="og:locale" content="en_US" />
 
   <!-- Twitter -->
   <meta name="twitter:card" content="summary_large_image" />
+  <meta name="twitter:title" content={metaTitle} />
+  <meta name="twitter:description" content={metaDescription} />
   <meta name="twitter:site" content={twitterAct} />
   <meta name="twitter:creator" content={twitterAct} />
-  <meta property="twitter:domain" content={ogUrl} />
-  <meta property="twitter:url" content={ogUrl} />
-  <meta name="twitter:title" content={title} />
-  <meta name="twitter:description" content={description} />
-  <meta name="twitter:image" content={ogImg} />
-  <meta name="twitter:image:alt" content={companyName} />
+  <meta property="twitter:domain" content={url} />
+  <meta property="twitter:url" content={url} />
+  <meta name="twitter:image" content={image} />
+  <meta name="twitter:image:alt" content={COMPANY_INFO.NAME} />
+
+  <!-- Canonical URL -->
+  <link rel="canonical" href={canonicalUrl} />
+
+  <!-- Basic SEO -->
+  <meta name="author" content="Scott Lopez" />
 </svelte:head>

package/src/lib/components/layout/Footer.svelte

@@ -6,8 +6,6 @@ SPDX-License-Identifier: CC-BY-4.0 OR GPL-3.0-or-later
 This file is part of Network Pro.
 ========================================================================== -->
 
-<!-- cspell:ignore ccby gnugpl -->
-
 <script>
   import { base } from '$app/paths';
   // Import icons for licenses
@@ -22,9 +20,9 @@ This file is part of Network Pro.
   const { COMPANY_INFO, CONTACT, PAGE, NAV } = CONSTANTS;
 
   // Dynamic links for licensing and trademark
-  const ccbyLink = `${base}/license#cc-by`;
-  const gnugplLink = `${base}/license#gnu-gpl`;
-  const trademarkLink = `${base}/license#trademark`;
+  const ccbyLink = `${base}/legal#cc-by`;
+  const gnugplLink = `${base}/legal#gnu-gpl`;
+  const trademarkLink = `${base}/legal#trademark`;
 
   /** @type {string} */
   const creatorUrl = 'https://netwk.pro';
@@ -101,12 +99,12 @@ This file is part of Network Pro.
       target={PAGE.BLANK}>
       <strong>{COMPANY_INFO.NAME}</strong>
     </a>
-    ({COMPANY_INFO.APP_NAME}&trade;)
+    ({COMPANY_INFO.APP_NAME})
   </p>
 
   <!-- Trademark Section -->
   <p>
-    {COMPANY_INFO.APP_NAME}&trade;, the shield logo, and the "{creatorSlogan}&trade;"
+    {COMPANY_INFO.APP_NAME}, the shield logo, and the "{creatorSlogan}&trade;"
     slogan are
     <a href={trademarkLink} target={PAGE.SELF}>trademarks</a>
     of {COMPANY_INFO.NAME}.
@@ -146,3 +144,5 @@ This file is part of Network Pro.
   </p>
 </div>
 <!-- END FOOTER -->
+
+<!-- cspell:ignore ccby gnugpl -->

package/src/lib/components/layout/HeaderDefault.svelte

@@ -21,7 +21,7 @@ This file is part of Network Pro.
   const aboutLink = `${base}/about`;
   const servLink = `${base}/services`;
   const lhubLink = `${base}/links`;
-  const fossLink = `${base}/foss-spotlight`;
+  const fossLink = `${base}/foss`;
   const discussLink =
     'https://github.com/netwk-pro/netwk-pro.github.io/discussions';