getcommit.dev

Live preview

This is a live, sandboxed embed of getcommit.dev — not a copy. What it shows can change any time the site itself does.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

public, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

Not sent

Strict-Transport-Security

Not sent

X-Frame-Options

Not sent

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://getcommit.dev/HTTP 301

   → https://getcommit.dev/

2. 2.https://getcommit.dev/HTTP 200

Meta tags

Title

Commit — Supply chain trust scoring for npm, PyPI, Cargo, and Go

Description

Score your dependencies on behavioral signals — publisher depth, release patterns, maintenance consistency. axios flags CRITICAL today on the signal its March 2026 attack used: one npm publisher. Free CLI, CI gate, API, MCP server, and IDE hooks for Cursor, Claude Code, and Windsurf.

Canonical

https://getcommit.dev

Robots

Not set

Generator

Not set

Open Graph title

Commit — Supply chain trust scoring for npm, PyPI, Cargo, and Go

Open Graph description

Score your dependencies on behavioral signals — publisher depth, release patterns, maintenance consistency. axios flags CRITICAL today on the signal its March 2026 attack used: one npm publisher. Free CLI, CI gate, API, MCP server, and IDE hooks for Cursor, Claude Code, and Windsurf.

Open Graph image

https://getcommit.dev/og-default.png

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Not set

Twitter image

https://getcommit.dev/og-default.png

robots.txt

Disallow rules (User-agent: *)

0

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

Related domains