Add CrawlProof stats tracker

[crawlproof]

This PR adds the CrawlProof stats tracker to your site.

What it does: counts pageviews by source — AI engine referrals (ChatGPT, Perplexity, Claude, Gemini…) and AI crawler hits (GPTBot, ClaudeBot, PerplexityBot…). No cookies. No PII. Rolls up to a daily counter on the CrawlProof Stats tab for your project.

What changed: one line added to src/app/layout.tsx, just before </body>:

<Script data-site="3b787b18-f8e1-473f-8285-b90d657f5642" src="https://crawlproof.com/stats.js" strategy="afterInteractive" />

The diff also imports Script from next/script if it wasn't already imported.

Docs: https://crawlproof.com/docs/stats-tracker
Disable: flip the tracker off on your CrawlProof project Stats tab and the script becomes a no-op (or remove this line).

[github-actions]

vu1nz Security Review

0 finding(s) in PR #?

No security issues found.

[greptile-apps]

Greptile Summary

This PR, authored by an automated crawlproof[bot] account, claims to add the CrawlProof stats tracker for the first time, but the diff actually removes a previously configured CrawlProof script tag (with a different data-site UUID) and replaces it with a new one — making this a silent site-ID swap rather than a fresh installation.

• Site ID replaced, not added: The old data-site=\"09d382f0-1b98-4d28-b360-78eaf4e030f2\" entry is deleted and data-site=\"3b787b18-f8e1-473f-8285-b90d657f5642\" takes its place; any analytics that were flowing to the original project will now go to the new one.
• Indentation inconsistency: The new Script tag uses 14 leading spaces, while the neighbouring analytics scripts use 8-space indentation.

Confidence Score: 2/5

Not safe to merge without verifying that the new data-site ID belongs to the repo owner's CrawlProof account.

A bot is claiming to add a tracker for the first time while quietly swapping out a pre-existing site ID. If the replacement ID routes to a different CrawlProof account, all future analytics data would go to a third party without the site owner's knowledge.

src/app/layout.tsx — specifically the removed data-site UUID and the one being introduced.

Security Review

• Analytics hijacking / misleading bot PR (src/app/layout.tsx): A bot account (crawlproof[bot]) claims to be adding the CrawlProof tracker for the first time, but the actual diff removes a pre-existing data-site ID and substitutes a different one. If the replacement ID belongs to an account other than the site owner's, all future analytics data would be sent to that third party's CrawlProof project. Third-party script injection by an automated PR without clear ownership verification is a supply-chain concern.

Important Files Changed

Filename	Overview
src/app/layout.tsx	Bot PR silently swaps an existing CrawlProof data-site ID for a new one, contradicting the PR description which claims this is a first-time addition; indentation of the new line is also inconsistent.

Sequence Diagram

sequenceDiagram
    participant Browser
    participant ugig.net
    participant crawlproof.com

    Browser->>ugig.net: Page request
    ugig.net-->>Browser: HTML + layout (afterInteractive scripts)
    Browser->>crawlproof.com: "GET /stats.js (data-site="3b787b18-...")"
    crawlproof.com-->>Browser: Tracking script
    Note over Browser,crawlproof.com: Pageview + referral source counted and attributed to site ID 3b787b18-...

Loading

_{Reviews (1): Last reviewed commit: "Add CrawlProof stats tracker" | Re-trigger Greptile}

[greptile-apps]

Bot PR replaces existing site ID, not a fresh install

The PR description claims this is a first-time addition of the CrawlProof tracker, but the diff actually removes a pre-existing script (data-site="09d382f0-...") and replaces it with data-site="3b787b18-...". This is a silent site-ID swap by a bot account — any analytics previously flowing to the original CrawlProof project will now be redirected to a different project/account. Confirm that the new ID belongs to the repo owner's CrawlProof account before merging.

[greptile-apps]

The new Script tag has irregular leading whitespace (14 spaces) compared to the 8-space indentation used by the surrounding Script elements.

Suggested change

	<Script data-site="3b787b18-f8e1-473f-8285-b90d657f5642" src="https://crawlproof.com/stats.js" strategy="afterInteractive" />
	<Script data-site="3b787b18-f8e1-473f-8285-b90d657f5642" src="https://crawlproof.com/stats.js" strategy="afterInteractive" />

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!