feat(website): real logo, project attribution, talks and podcasts

[advaitpatel]

Four rounds of feedback on the published site.

1. Real DockSec logo

The wordmark from images/docksec-logo-for-github.png replaces the placeholder SVG I drew, in the navbar and as the social card. The shield is cropped out as a square favicon.

The PNG has a white background, so the navbar gives it a small rounded plate — on the dark theme a raw white rectangle reads as a mistake rather than a logo.

2. Attribution — the site credited nobody

Advait Patel is now named as creator:

• On the landing page, under the closing call to action
• In the footer of every page
• On a new About the project page

The About page also records Arkadii Yakovets as co-lead, matching what README.md already says — crediting one lead when the repo names two would have been inaccurate. It covers why the project exists, how it is governed (no paid tier, no telemetry — decisions, not roadmap gaps), and how to get involved.

3. Talks and podcasts

6 conference talks: OWASP Global AppSec EU (Vienna, live workshop), OWASP SnowFROC (Denver), Open Cloud Security Conference, OWASP Global AppSec USA (DC), Silicon Valley Cybersecurity Conference, IEEE EIT.

2 new podcasts: ISACA Podcast, The Elephant in AppSec.

1 independent article: the HackerNoon engineer's guide.

Separate section — "Written by the project lead": the 5-part SecureWorld series and the earlier HackerNoon article. A maintainer's own writing is useful background, not independent validation, and merging it into the press list would blur a line worth keeping for exactly the audience this page targets.

51 items total. Every new URL was checked for HTTP 200 and its title and date read from the page rather than typed by hand.

4. Press strip — outlet treatment

Now renders bordered plates with the outlet name and what it was: "Help Net Security / 4 features", "ISACA / Podcast".

On logos specifically: the component accepts a logo image per entry, but none ship here. Publications rarely license their marks for third-party use, and the favicons they expose are 16×16 — which looks markedly worse scaled up than clean type does. CVE Lite bundles press logos; if you can obtain usage rights, drop files in static/img/press/ and set logo: on the entry and they render immediately.

Verification

• npm run build succeeds (onBrokenLinks: 'throw'), typecheck clean
• npm audit — 0 vulnerabilities
• 546 Python tests pass, ruff check . clean
• Attribution confirmed present in landing, About, and docs-page footers
• All 6 press-strip plates and every new press entry render in the built HTML

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None