Maintenance updates
— Dependency update
- The Zod package used by this project is now version 4.6.7. Older 3.x releases do not include the published fix for a high-severity issue in that library.
- This site does not validate visitor input with Zod. The lint checks that also use the package accept this version.
- This note describes the unmerged pull request. It is not a production rollout.
— Image description and server header
- The SEO Optimizer logo in the site header now has a written description for visitors and search tools.
- Responses no longer advertise Next.js in the
X-Powered-Byheader. - This note describes the unmerged pull request. It is not a production rollout.
— Billing checkout diagnostics
- If Stripe rejects a billing checkout, the site returns a generic “please try again” response. Diagnostic details stay in server logs and do not include payment or account data.
- Startup and the administrator health check can warn when a Stripe secret key and a price ID are explicitly marked for different test and live modes. Ordinary Stripe price IDs do not carry that mode, so the check stays quiet and does not contact Stripe.
- This note describes the unmerged diagnostics pull request. It is not a production rollout.
— SEO articles
- A public articles index and the note “Checks to run before you request indexing” are part of this branch, with sitemap entries and home-page links.
- Page views use Vercel Analytics. The existing content security policy already allows the analytics script host, so no extra hosts were added. Next.js stays at 16.4.2.
- This note describes the unmerged articles pull request after merging main. It is not a production rollout.
— Monthly subscriptions
- Monthly checkout links purchases to the signed-in account. Starter, Growth and Pro use consistent $19.99, $39.99 and $59.99 prices.
- Confirmed active subscriptions determine daily scans (5, 25 or 100) and sampled pages (3, 6 or 10). Free access remains 5 scans per day.
- Existing subscription prices remain recognized. Production rollout completed; all three monthly checkout pages and Google sign-in were checked without submitting payment. Eleven focused tests passed. A signed webhook replay returned HTTP 200; a live paid SEO purchase was not performed.
SEO.deepecurity.io
- Public Features, Pricing, Sample report, and Docs pages stay available, with Starter, Growth, and Pro billed monthly at $19.99, $39.99, and $59.99.
- Public checkout stays closed until Stripe environment settings are present. The signed billing webhook still records subscription events and does not change the daily scan allowance.
- A verified admin allowlist can open admin pages and skip the daily scan allowance. Fetch protections and burst limits remain.
- The billing workspace and service-audit path remain. This note describes the unmerged branch, not a production rollout.
- Updated Next.js and matching lint configuration to 16.4.2 and refreshed compatible locked dependencies, including migration-tool esbuild.
- Corrected the ESM test runner and fixture naming. 26 tests, production build/type checks and hosted security checks passed.
Backfilled from merged changes and their recorded validation. This page records shipped maintenance; it does not claim every security issue is resolved.