v0.3.0

Added

• Local audit engine in Go: 72 page checks (36 SEO, 17 AEO, 19 GEO) and 7 opt-in site checks.
• Output formats -format csv|json|sarif, CI gate -fail-under N, -sitemap and -site.
• Composite GitHub Action that uploads SARIF to code scanning and gates on score.
• MCP server (-mcp) and findable-mcp npm runner.
• Cloudflare Worker edge API and web UI served from one source, with native rate limiting.
• /learn articles on SEO, AEO, GEO and every check group.
• Logo drafts, build story, cover image, CONTRIBUTING, SECURITY with an SSRF policy, issue and PR templates.
• Strict golangci-lint and Biome configs, CI jobs and GoReleaser config.
• Worker site files: /robots.txt, /sitemap.xml, /llms.txt, /llms-full.txt, JSON-LD in the home page head, and HSTS, X-Frame-Options and Referrer-Policy headers.
• Worker static assets in worker/public/ (favicon, touch icon, og image), with a test that keeps them in step with the UI.
• A test that scans the home page in-process and requires SEO 90, AEO 85 and GEO 80.
• Bare hosts like example.com are accepted and scanned over https.
• Share button, Markdown export and a WebMCP scan_url tool in the web UI.
• The Go engine runs the four focus keyphrase checks.

Changed

• Renamed the product to findable; module path is github.com/nadimtuhin/findable.
• Split the CLI into cmd/findable and internal/ packages.
• Results UI shows a score hero, family cards and a failing-first issue list with AA contrast colors.
• The API returns the composite overall score.
• Redesigned the web UI for the AI era; the worker bundle budget is now 50 KiB gzip.
• JSON-LD parsing walks arrays, @type lists and nested nodes in both engines; only page-level or author Persons count as author schema.
• A heading counts as a question when it starts with what, how or why, or ends with ?, in both engines.

Removed

• The seoscore.tools remote mode; findable runs standalone.
• Committed worker/dist, agent scratch notes and design mockups (now in nadimtuhin/design-fusion).

Security

• Scan fetches block private and reserved addresses (including 6to4, Teredo and NAT64), allow only ports 80 and 443, re-check up to 5 redirects, and cap pages at 5 MB.
• The worker UI is served with a hash-based CSP that refuses framing, plus nosniff.
• Scans are rate limited to 10 a minute per client, IPv6 clients by /64.
• -serve refuses local files and private targets.

v0.2.0

Renamed to findable (module github.com/nadimtuhin/findable), Fusion UI redesign, worker site files and security headers, strict golangci-lint and Biome. See CHANGELOG.md.

v0.1.0

First release: scan a site with seoscore.tools and save the CSV report. Install with: go install github.com/nadimtuhin/seoscore-cli@v0.1.0