feat(footer): use @profullstack/footer

[ralyodio]

Replaces the hand-written footer bottom bar / webring nav with @profullstack/footer (installed as latest), rendered on the server so the ring verifier sees it and template updates from jsDelivr @latest reach the site without a redeploy.

Rich footer kept (brand, onion link, Product/Company/Legal, Connect). Footer is a client component, so app/layout.jsx (server) renders the package footer and passes it through ClientLayout as a prop; it replaces only the bottom bar (copyright + ring nav). Owner is the default Profullstack, Inc. (the old line said "© QryptChat", a product name). The root layout now has revalidate = 3600 so static pages ISR hourly.

🤖 Generated with Claude Code

[github-actions]

ThreatCrush Security Scan

13 finding(s)

MEDIUM: 9 | LOW: 4

Severity	Rule	Location
MEDIUM	js-unescaped-html-sink	src/app/blog/[slug]/page.jsx:38
MEDIUM	js-unescaped-html-sink	src/app/blog/[slug]/page.jsx:66
MEDIUM	js-unescaped-html-sink	src/app/faq/page.jsx:57
MEDIUM	js-unescaped-html-sink	src/app/layout.jsx:141
MEDIUM	js-unescaped-html-sink	src/app/layout.jsx:145
MEDIUM	js-unescaped-html-sink	src/app/page.jsx:47
MEDIUM	redos-nested-quantifier	src/lib/auth/dns-name.js:88
MEDIUM	js-unescaped-html-sink	src/lib/components/chat/MessageItem.jsx:85
MEDIUM	js-unescaped-html-sink	src/lib/components/chat/MessageItem.jsx:130
LOW	secret-generic-credential	src/app/api/auth/register-anon/route.test.js:32
LOW	secret-jwt	tests/debug-sms.js:10
LOW	secret-generic-credential	tests/private-key-import-export.test.js:252
LOW	secret-generic-credential	tests/private-key-import-export.test.js:264

Snippets are redacted; ThreatCrush never prints matched credential material.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​profullstack/​footer@​0.2.1

View full report