proof-of-commitment 1.12.0 → 1.12.1

package/index.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * proof-of-commitment CLI v1.12.0
+ * proof-of-commitment CLI v1.12.1
  * Scores npm/PyPI/Cargo/Go packages on behavioral commitment signals.
  * Usage: npx proof-of-commitment [packages...] [options]
  */
@@ -180,10 +180,23 @@ function printTable(results, { totalScanned, totalCritical, lockfile } = {}) {
 
   // Footer with web link + CI integration CTA
   const topPkgs = results.slice(0, 10).map(r => r.name).join(',');
-  console.log(clr(c.cyan, `\n  🔗 Full report: ${WEB}?packages=${encodeURIComponent(topPkgs)}`));
+  const utm = 'utm_source=cli&utm_medium=audit';
+  console.log(clr(c.cyan, `\n  🔗 Full report: ${WEB}?packages=${encodeURIComponent(topPkgs)}&${utm}`));
   console.log(clr(c.cyan, `  🤖 GitHub Action: github.com/piiiico/commit-action — block CRITICAL packages in CI`));
   console.log(clr(c.dim, `  📋 Add to this project: `) + clr(c.cyan, `poc init`) + clr(c.dim, ` — creates workflow + README badge`));
 
+  // Per-package profile URLs — drive traffic to permanent, indexable pages
+  const ecoPath = { npm: 'npm', pypi: 'pypi', cargo: 'cargo', golang: 'go' };
+  const profilePkgs = results.slice(0, 5).filter(r => r.name && ecoPath[r.ecosystem || 'npm']);
+  if (profilePkgs.length > 0) {
+    console.log(clr(c.dim, `\n  📄 Package profiles:`));
+    for (const r of profilePkgs) {
+      const eco = ecoPath[r.ecosystem || 'npm'];
+      const name = encodeURIComponent(r.name).replace(/%40/g, '@').replace(/%2F/g, '/');
+      console.log(clr(c.dim, `     getcommit.dev/${eco}/${name}`));
+    }
+  }
+
   // Contextual upsell — show when findings make monitoring relevant
   if (effectiveCritical > 0) {
     // Check for API key synchronously via env (fast path)
@@ -193,7 +206,7 @@ function printTable(results, { totalScanned, totalCritical, lockfile } = {}) {
         clr(c.cyan, `poc watch ${results.find(r => hasCritical(r.riskFlags))?.name || results[0]?.name}`));
     } else {
       console.log(clr(c.dim, `\n  📊 Monitor ${effectiveCritical === 1 ? 'this' : 'these ' + effectiveCritical} CRITICAL ${effectiveCritical === 1 ? 'package' : 'packages'} — get alerted when scores change.`));
-      console.log(clr(c.dim, '     Get a free API key: ') + clr(c.cyan, 'https://getcommit.dev/get-started'));
+      console.log(clr(c.dim, '     Get a free API key: ') + clr(c.cyan, 'https://getcommit.dev/get-started?utm_source=cli'));
       console.log(clr(c.dim, '     Then run: ') + clr(c.cyan, 'poc login'));
     }
   }
@@ -202,7 +215,7 @@ function printTable(results, { totalScanned, totalCritical, lockfile } = {}) {
 
 function printHelp() {
   console.log(`
-${clr(c.bold, 'proof-of-commitment')} v1.12.0 — supply chain risk scorer
+${clr(c.bold, 'proof-of-commitment')} v1.12.1 — supply chain risk scorer
 
 ${clr(c.bold, 'Usage:')}
   npx proof-of-commitment                            Auto-detect manifest in current dir
@@ -785,7 +798,7 @@ async function cmdLogin(keyArg) {
     console.log(clr(c.dim, '    poc watchlist          View monitored packages'));
     console.log(clr(c.dim, '    poc unwatch <package>  Remove from monitoring'));
   } else {
-    console.log(clr(c.dim, '  Upgrade to Pro for monitoring + alerts: https://getcommit.dev/pricing'));
+    console.log(clr(c.dim, '  Upgrade to Pro for monitoring + alerts: https://getcommit.dev/pricing?utm_source=cli'));
   }
   console.log();
 }
@@ -864,7 +877,7 @@ async function cmdWatch(pkg, ecosystem) {
   const key = await readApiKey();
   if (!key) {
     console.error(clr(c.red, 'No API key found. Set COMMIT_API_KEY or add api_key=<key> to ~/.commit/config'));
-    console.error(clr(c.dim, 'Get a key at https://getcommit.dev/pricing'));
+    console.error(clr(c.dim, 'Get a key at https://getcommit.dev/pricing?utm_source=cli'));
     process.exit(1);
   }
 
@@ -1129,7 +1142,7 @@ ${rows}
 <div class="footer">
   <span>Generated by <a href="${WEB}" target="_blank">proof-of-commitment</a></span>
   <span><a href="https://github.com/piiiico/commit-action" target="_blank">GitHub Action</a></span>
-  <span><a href="https://getcommit.dev/pricing" target="_blank">Commit Pro</a></span>
+  <span><a href="https://getcommit.dev/pricing?utm_source=cli&amp;utm_medium=report" target="_blank">Commit Pro</a></span>
 </div>
 <script>
 function copyMd() {
@@ -1385,7 +1398,7 @@ jobs:
     console.log(clr(c.white, '  2. Push to trigger the existing workflow'));
   }
   console.log(clr(c.dim, `\n  Want daily monitoring + alerts? Get a free key:`));
-  console.log(clr(c.cyan, '  https://getcommit.dev/get-started'));
+  console.log(clr(c.cyan, '  https://getcommit.dev/get-started?utm_source=cli'));
   console.log(clr(c.dim, '  Then run: ') + clr(c.cyan, 'poc login') + clr(c.dim, ' + ') + clr(c.cyan, 'poc watch <package>\n'));
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "proof-of-commitment",
-  "version": "1.12.0",
+  "version": "1.12.1",
   "description": "Supply chain risk scorer for npm, PyPI, Cargo, and Go packages — behavioral signals that can't be faked",
   "type": "module",
   "bin": {