@@ -1,107 +1,39 @@
 # pkgdiff
 
-> Compare and analyze package versions across NuGet, npm, PyPI and Pub registries. Track breaking changes, view detailed release notes, and understand version differences with our free online diff tool.
+> Shows every release note between two versions of a package across NuGet, npm, PyPI, Maven, pub.dev and Packagist in one categorized timeline, with a security picture of the upgrade.
 
-## Overview
+pkgdiff helps developers decide whether a dependency upgrade is safe. It combines release notes from the registries and from GitHub, and adds vulnerability and project health data. It is free to use and needs no account.
 
-pkgdiff is a web-based tool that helps developers compare package versions across different registries (NuGet, npm, PyPI and Pub). It aggregates release notes from multiple sources including registry pages and GitHub Releases, providing a consolidated view of changes between any two versions. Perfect for developers upgrading dependencies and managing package updates.
+## Main pages
 
-## Core Features
+- [Home](https://pkgdiff.dev/): Search for a package in any supported registry
+- [Browse packages](https://pkgdiff.dev/packages): All packages pkgdiff has analyzed
+- [Dependency audit](https://pkgdiff.dev/audit): Check a manifest's dependencies for known problems
+- [About](https://pkgdiff.dev/about): Who runs pkgdiff, its data sources and their limits
 
-- **Multi-Registry Support**: Search packages across NuGet, npm, and other registries
-- **Release Notes Aggregation**: Combines release notes from registry pages and GitHub Releases
-- **Version Diff**: Compare any two versions to see consolidated changelogs
-- **Real-Time Updates**: Background jobs continuously fetch and update package data
-- **Categorized Changes**: Release notes are automatically categorized by type (features, fixes, breaking changes, etc.)
-- **Export Functionality**: Export release notes in multiple formats (Markdown, JSON, Text)
+## Packages by registry
 
-## Main Pages
+- [NuGet packages](https://pkgdiff.dev/packages?registry=nuget)
+- [npm packages](https://pkgdiff.dev/packages?registry=npm)
+- [PyPI packages](https://pkgdiff.dev/packages?registry=pypi)
+- [Maven packages](https://pkgdiff.dev/packages?registry=maven)
+- [pub.dev packages](https://pkgdiff.dev/packages?registry=pub.dev)
+- [Packagist packages](https://pkgdiff.dev/packages?registry=packagist)
 
-### Home (/)
-The landing page features a search interface where users can:
-- Select a package registry from the dropdown (NuGet, npm, etc.)
-- Search for any package by name
-- View live updates of recently analyzed packages
-- Access example searches with popular packages
+## Package pages
 
-### Package Page (/package/:registry/:packageId)
-Displays detailed information about a specific package:
-- Package metadata (description, authors, license, repository)
-- Complete version history with release dates
-- Tabbed interface for viewing releases and comparing versions
-- Direct links to package registry and source repository
-- Categorized release notes for each version
+Package pages follow the pattern `https://pkgdiff.dev/package/{registry}/{packageId}`, for example [react on npm](https://pkgdiff.dev/package/npm/react). Each one lists the package's versions with categorized release notes, and can compare two versions.
 
-### Browse Packages (/packages)
-List view of all packages in the system with:
-- Filtering by registry
-- Search functionality
-- Sorting options
-- Pagination
+## Data sources
 
-## API Endpoints
+- Registries: NuGet, npm, PyPI, Maven Central, pub.dev and Packagist
+- Release notes: registry pages, GitHub releases and changelogs
+- Security: OSV.dev, deps.dev, OpenSSF Scorecard and Socket
 
-The service exposes a REST API:
+Changes are categorized by rules that match release note headings and keywords, so a category can be wrong. The release digests under `/blog` are AI-generated and not reviewed by a person; do not treat them as a primary source.
 
-- `GET /api/package/{registry}/{packageId}` - Get package metadata and versions
-- `POST /api/package/analyze` - Trigger package analysis
-- `GET /api/package/registries` - List supported registries
-- `GET /api/package/recent` - Get recent package searches
-- `GET /health` - Service health check
+## Optional
 
-## Data Sources
-
-pkgdiff retrieves data from:
-1. **NuGet.org**: For .NET packages
-2. **npmjs.com**: For Node.js packages  
-3. **GitHub Releases**: Fallback for release notes when registry data is incomplete
-4. **Package repositories**: Direct links to source code and issue trackers
-
-## Technical Stack
-
-- **Frontend**: Angular with TypeScript, Tailwind CSS
-- **Backend**: ASP.NET Core Web API
-- **Database**: PostgreSQL with Entity Framework Core
-- **Real-time Communication**: SignalR for live analysis updates
-- **Background Jobs**: Hangfire for scheduled scraping tasks
-- **Caching**: 30-day cache for package data
-
-## Search Capabilities
-
-Users can search for:
-- Package names (e.g., "Newtonsoft.Json", "react")
-- View all versions with release dates
-- Compare any two versions
-- Filter by registry type
-- Access recent and popular searches
-
-## Content Organization
-
-- Release notes are scraped from registry pages and GitHub
-- Changes are categorized automatically (New Features, Bug Fixes, Breaking Changes, etc.)
-- Version comparisons show consolidated changelogs
-- All changes are timestamped and linked to sources
-
-## Privacy & Terms
-
-- Minimal data collection (search history, IP for rate limiting)
-- No third-party tracking or advertising
-- Open-source project
-- Free to use
-- See /privacy and /terms for detailed policies
-
-## Use Cases
-
-pkgdiff is designed for developers who need to:
-- Understand what changed between package versions
-- Review breaking changes before upgrading dependencies
-- Analyze release notes from multiple sources in one place
-- Export changelogs for documentation
-- Track package evolution over time
-
-## Links
-
-- Home: https://pkgdiff.com
-- GitHub: https://github.com/pkgdiff-dev
-- Privacy Policy: https://pkgdiff.com/privacy
-- Terms of Service: https://pkgdiff.com/terms
+- [Source code](https://github.com/pkgdiff-dev/pkgdiff)
+- [Privacy policy](https://pkgdiff.dev/privacy)
+- [Terms of service](https://pkgdiff.dev/terms)
@@ -7,6 +7,7 @@ export const serverRoutes: ServerRoute[] = [
   { path: 'package/:registry/:packageId', renderMode: RenderMode.Server },
   { path: 'package/:registry/:packageId/:version', renderMode: RenderMode.Server },
   { path: 'package/:registry/:scope/:name/:version', renderMode: RenderMode.Server },
+  { path: 'about', renderMode: RenderMode.Server },
   { path: 'terms', renderMode: RenderMode.Server },
   { path: 'privacy', renderMode: RenderMode.Server },
   { path: 'cookies', renderMode: RenderMode.Server },
 
@@ -30,6 +30,10 @@ export const routes: Routes = [
         path: 'package/:registry/:scope/:name/:version',
         loadComponent: () => import('./features/package/package').then(m => m.PackageComponent)
       },
+      {
+        path: 'about',
+        loadComponent: () => import('./features/about/about').then(m => m.AboutComponent)
+      },
       {
         path: 'terms',
         loadComponent: () => import('./features/terms/terms').then(m => m.TermsComponent)
 
@@ -0,0 +1,70 @@
+<div class="flex flex-col items-center min-h-full min-h-[calc(100vh-64px)]">
+  <div class="w-full max-w-[720px] px-6 py-12">
+    <div class="mb-10">
+      <h1 class="text-3xl font-bold tracking-tight text-[#111418] dark:text-white mb-2">About {{ appName }}</h1>
+      <p class="text-sm text-gray-500 dark:text-gray-500">
+        Every release note between two versions of a package, with a security picture of the upgrade.
+      </p>
+    </div>
+
+    <div class="space-y-8 text-sm leading-relaxed text-gray-700 dark:text-gray-300">
+
+      <section>
+        <h2 class="text-lg font-semibold text-[#111418] dark:text-white mb-3">Who runs it</h2>
+        <p>
+          {{ appName }} is built and operated by {{ operatorName }}, an individual developer. It is free to use and
+          needs no account. The code is on
+          <a href="https://github.com/pkgdiff-dev/pkgdiff" target="_blank" rel="noopener noreferrer" class="text-primary hover:underline">GitHub</a>,
+          where you can report a problem. You can also write to
+          <a href="mailto:{{ contactEmail }}" class="text-primary hover:underline">{{ contactEmail }}</a> or find
+          {{ operatorName }} on
+          <a href="https://github.com/fleizean" target="_blank" rel="noopener noreferrer" class="text-primary hover:underline">GitHub</a>.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-lg font-semibold text-[#111418] dark:text-white mb-3">Where the data comes from</h2>
+        <p class="mb-3">
+          Versions and package details come from the registries: NuGet, npm, PyPI, Maven Central, pub.dev and Packagist.
+          Release notes come from those registries and from each project's GitHub releases and changelogs. Every note
+          links back to its source, and it still belongs to its authors.
+        </p>
+        <p>The security information comes from these services:</p>
+        <ul class="list-disc pl-5 mt-2 space-y-1">
+          <li><a href="https://osv.dev/" target="_blank" rel="noopener noreferrer" class="text-primary hover:underline">OSV.dev</a> for known vulnerabilities</li>
+          <li><a href="https://deps.dev/" target="_blank" rel="noopener noreferrer" class="text-primary hover:underline">deps.dev</a> for package and project information</li>
+          <li><a href="https://scorecard.dev/" target="_blank" rel="noopener noreferrer" class="text-primary hover:underline">OpenSSF Scorecard</a> for project security practices</li>
+          <li><a href="https://socket.dev/" target="_blank" rel="noopener noreferrer" class="text-primary hover:underline">Socket</a> for suspicious package behaviour</li>
+        </ul>
+      </section>
+
+      <section>
+        <h2 class="text-lg font-semibold text-[#111418] dark:text-white mb-3">How changes are categorised</h2>
+        <p>
+          Changes are sorted into groups such as breaking changes, new features and bug fixes by matching the section
+          headings and keywords in the release notes. These are rules, not a reading of the code, so a change can land
+          in the wrong group, and a breaking change its authors did not mention will not appear.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-lg font-semibold text-[#111418] dark:text-white mb-3">How fresh the data is</h2>
+        <p>
+          Package data is stored and refreshed by background jobs, so a very recent release or advisory can take time
+          to appear. Security checks run in the background too, and a page shows what was last retrieved.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-lg font-semibold text-[#111418] dark:text-white mb-3">What it cannot tell you</h2>
+        <p>
+          No listed vulnerability does not prove a package is safe. It means the sources above report nothing for it
+          right now. Use {{ appName }} to prepare an upgrade, and still test the upgrade yourself. The
+          <a routerLink="/blog" class="text-primary hover:underline">release digests</a> are written by AI and not
+          reviewed by a person, so they are labelled as such and kept out of search results.
+        </p>
+      </section>
+
+    </div>
+  </div>
+</div>
@@ -0,0 +1,25 @@
+import { ChangeDetectionStrategy, Component, inject } from '@angular/core';
+import { RouterLink } from '@angular/router';
+import { APP_CONFIG } from '../../core/config/app.config';
+import { SeoService } from '../../core/services/seo.service';
+
+@Component({
+  changeDetection: ChangeDetectionStrategy.OnPush,
+  selector: 'app-about',
+  standalone: true,
+  imports: [RouterLink],
+  templateUrl: './about.html',
+})
+export class AboutComponent {
+  appName = APP_CONFIG.name;
+  contactEmail = APP_CONFIG.contact.email;
+  operatorName = 'Enes Yağız';
+
+  constructor() {
+    inject(SeoService).updateMeta({
+      title: 'About pkgdiff: Who Runs It and Where the Data Comes From',
+      description: 'Who operates pkgdiff, which sources its release notes and security data come from, how changes are categorised, and what the data cannot tell you.',
+      url: '/about',
+    });
+  }
+}
@@ -1,7 +1,7 @@
 <div class="flex-1 w-full max-w-[900px] mx-auto px-6 py-12 relative">
 
   <nav aria-label="Breadcrumb" class="flex items-center gap-2 text-xs font-medium text-slate-400 mb-8">
-    <a routerLink="/blog" class="hover:text-primary transition-colors">Blog</a>
+    <a routerLink="/blog" class="hover:text-primary transition-colors">Release digests</a>
     <lucide-icon [img]="ChevronRightIcon" [size]="14" aria-hidden="true"></lucide-icon>
     <span class="text-slate-600 dark:text-slate-300" aria-current="page">Article</span>
   </nav>
@@ -61,7 +61,7 @@ <h1 class="text-2xl font-bold text-slate-900 dark:text-white mb-2">Article Not F
         published yet.</p>
       <a routerLink="/blog"
         class="inline-flex items-center justify-center px-6 py-3 border border-slate-200 dark:border-slate-800 text-sm font-bold rounded text-slate-700 dark:text-slate-300 bg-white dark:bg-background-dark hover:bg-slate-50 dark:hover:bg-slate-900 transition-colors uppercase tracking-widest font-mono">
-        Return to Blog List
+        Return to Release Digests
       </a>
     </div>
     }
 
@@ -70,7 +70,10 @@ export class BlogDetailComponent {
       const failure = loadFailureOf(loaded.failure);
       if (failure === 'not-found') {
         this.httpStatus.notFound();
-        this.seo.setNotFound('Article Not Found — pkgdiff Blog', 'This blog post does not exist or has not been published yet.');
+        this.seo.setNotFound('Article Not Found — pkgdiff', 'This release digest does not exist or has not been published yet.');
+      } else {
+        this.httpStatus.serviceUnavailable();
+        this.seo.setUnavailable();
       }
       this.state.set(failure);
       return;
@@ -82,12 +85,14 @@ export class BlogDetailComponent {
 
     const excerpt = excerptOf(post.content);
     this.seo.updateMeta({
-      title: `${post.title} — pkgdiff Blog`,
+      title: `${post.title} — pkgdiff`,
       description: excerpt,
       url: `/blog/${post.slug}`,
       type: 'article',
       image: '/og-image/blog.png'
     });
+    // Posts are generated and unreviewed, so they stay out of search results
+    this.seo.setNoIndex();
 
     this.seo.setStructuredData({
       '@context': 'https://schema.org',
@@ -104,7 +109,7 @@ export class BlogDetailComponent {
 
     this.seo.setBreadcrumb([
       { name: 'Home', url: '/' },
-      { name: 'Blog', url: '/blog' },
+      { name: 'Release digests', url: '/blog' },
       { name: post.title, url: `/blog/${post.slug}` },
     ]);
   }
 
@@ -155,7 +155,7 @@ <h3 class="text-sm font-semibold text-[#111418] dark:text-white">Track Breaking
         </div>
         <div class="flex flex-col items-center gap-2">
           <lucide-icon [img]="SparklesIcon" [size]="22" class="text-primary mb-1"></lucide-icon>
-          <h3 class="text-sm font-semibold text-[#111418] dark:text-white">4 Registries Supported</h3>
+          <h3 class="text-sm font-semibold text-[#111418] dark:text-white">6 Registries Supported</h3>
           <p class="text-xs text-[#617589] dark:text-gray-400 leading-relaxed">
             Works with NuGet (.NET), npm (JavaScript), PyPI (Python), Maven (Java), Pub (Dart / Flutter), and Packagist (PHP).
           </p>
 
@@ -20,8 +20,9 @@ export class FooterComponent {
   readonly exploreLinks = [
     { path: '/packages', label: 'Packages' },
     { path: '/audit', label: 'Dependency audit' },
-    { path: '/blog', label: 'Blog' },
+    { path: '/blog', label: 'Release digests' },
     { path: '/contributors', label: 'Contributors' },
+    { path: '/about', label: 'About' },
   ];
 
   appName = APP_CONFIG.name;
 
@@ -38,8 +38,9 @@ export class HeaderComponent {
   ];
 
   readonly moreLinks = [
-    { path: '/blog', label: 'Blog' },
+    { path: '/blog', label: 'Release digests' },
     { path: '/contributors', label: 'Contributors' },
+    { path: '/about', label: 'About' },
   ];
 
   menuOpen = signal(false);