Merge pull request #20 from himanshusaxenagithub/cursor/site-activity-one-total-0636

Show one Site visitors total, not Opens and Users

Author: himanshusaxenagithub

CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## v0.7.5 — 2026-09-13
+
+### Changed — one Site activity number
+
+- The start page shows a single **Site visitors** figure: people who
+  opened this website, per GoatCounter’s public counter. The Opens /
+  Users pair is gone. That number is not “users” of the scanner.
+- Short note: approximate public total; not DoD adoption; not a count of
+  people who downloaded or ran the scanner. A muted link points at the
+  public GoatCounter page.
+
 ## v0.7.4 — 2026-09-13
 
 ### Fixed — Site activity no longer trusts stale TOTAL.json

README.md

@@ -105,12 +105,12 @@ The [Used this?](docs/used.html) page stays as the optional public-note / GitHub
 
 ### GoatCounter (site activity)
 
-The start page **Site activity** block shows approximate public GoatCounter totals: opens / pageviews and users / unique visitors. Those are website visits, not DoD adoption figures.
+The start page **Site activity** block shows one number, labeled **Site visitors**: people who opened this website, per GoatCounter’s public counter. That is not DoD adoption, and not a count of people who downloaded or ran the scanner. The public widget does not separate raw pageviews from unique visitors.
 
 Set the site code in **one** place: `docs/site-config.js` → `goatcounterCode`. The committed code is `stig-hsaxena` (https://stig-hsaxena.goatcounter.com). `docs/site-chrome.js` then:
 
 1. Injects `https://gc.zgo.at/count.js` with `data-goatcounter="https://stig-hsaxena.goatcounter.com/count"` on every page that includes the two scripts.
-2. Fills the landing totals from GoatCounter’s public site widget: parse `#gcvc-views` on `https://stig-hsaxena.goatcounter.com/counter/TOTAL.html`. `TOTAL.json` is a fallback, but that file can stay at 0 while the widget is correct. If both fail or JSON is 0, the page sums the public per-path JSON counters for `/`, `/index.html`, `/reviews.html`, `/demo.html`, `/evidence.html`, `/used.html`, and `/review-thanks.html`. GoatCounter publishes one visitor total — opens and users both show that number. If nothing works, the numbers stay `—`. Nothing is invented.
+2. Fills that one **Site visitors** figure from GoatCounter’s public site widget: parse `#gcvc-views` on `https://stig-hsaxena.goatcounter.com/counter/TOTAL.html`. `TOTAL.json` is a fallback, but that file can stay at 0 while the widget is correct. If both fail or JSON is 0, the page sums the public per-path JSON counters for `/`, `/index.html`, `/reviews.html`, `/demo.html`, `/evidence.html`, `/used.html`, and `/review-thanks.html`. If nothing works, the number stays `—`. Nothing is invented.
 
 In GoatCounter settings, enable **Allow adding visitor counts on your website** (defaults to off). Making the dashboard public is optional; the JSON counter needs that visitor-counter flag.
 

docs/evidence.html

@@ -104,7 +104,7 @@ <h2>What we do not claim</h2>
       <ul>
         <li>This project is <b>not</b> a Department of Defense or DISA product. Those organisations have not endorsed it. STIGs are public checklists DISA publishes; using the identifiers does not imply a relationship.</li>
         <li>GitHub stars, forks, watchers or traffic are <b>not</b> evidence of organisational adoption.</li>
-        <li>The start page may show approximate public GoatCounter site activity (opens and users). Those are website visits, not DoD adoption, customer counts, or organisational use. We do not publish customer logos. Moderated <a href="reviews.html">reviews</a> appear only after manual approval; email addresses are never published. Optional notes can still go through <a href="used.html">Used this?</a>. This page invents none.</li>
+        <li>The start page may show one approximate public GoatCounter <b>site visitors</b> total — people who opened pages on this website. That is not DoD adoption, and not a count of people who downloaded or ran the scanner. We do not publish customer logos. Moderated <a href="reviews.html">reviews</a> appear only after manual approval; email addresses are never published. Optional notes can still go through <a href="used.html">Used this?</a>. This page invents none.</li>
         <li>Sample or example-run figures labeled as sample data are <b>not</b> real clinic, school or company results.</li>
         <li>Selecting CAT I, or finishing a first scan, is <b>not</b> a claim that a system is “STIG compliant,” accredited, or safe.</li>
         <li>The tool finds configuration gaps. That is not a claim about hacking, exploits, or active attacks.</li>

docs/index.html

@@ -280,12 +280,11 @@ <h2>Which computer are you securing?</h2>
 
     <div class="activity" id="site-activity">
       <h3>Site activity</h3>
-      <p class="sub">Approximate public GoatCounter stats for this website. These are not Department of Defense adoption figures, customer counts, or organisational use.</p>
       <div class="stats">
-        <div class="stat"><b data-stat="opens">—</b><span>Opens / pageviews — GoatCounter’s public visitor total</span></div>
-        <div class="stat"><b data-stat="users">—</b><span>Users / unique visitors — same total, not a second metric</span></div>
+        <div class="stat"><b data-stat="visitors">—</b><span>Site visitors</span></div>
       </div>
-      <p class="muted" data-stat="note">Loading public stats…</p>
+      <p class="sub">People who opened this site (GoatCounter).</p>
+      <p class="muted" data-stat="note">Approximate public GoatCounter total. Not Department of Defense adoption, and not a count of people who downloaded or ran the scanner. A fuller path breakdown is on the <a href="https://stig-hsaxena.goatcounter.com">public GoatCounter page</a> if that site is viewable.</p>
     </div>
 
     <details class="tech" id="tech-notes">

docs/site-chrome.js

@@ -113,12 +113,10 @@
   async function fillSiteActivity() {
     const root = document.getElementById("site-activity");
     if (!root) return;
-    const opensEl = root.querySelector("[data-stat=opens]");
-    const usersEl = root.querySelector("[data-stat=users]");
+    const visitorsEl = root.querySelector("[data-stat=visitors]");
     const noteEl = root.querySelector("[data-stat=note]");
     const dash = function () {
-      if (opensEl) opensEl.textContent = "—";
-      if (usersEl) usersEl.textContent = "—";
+      if (visitorsEl) visitorsEl.textContent = "—";
     };
 
     if (!goatConfigured()) {
@@ -135,20 +133,7 @@
     try {
       const got = await publicGoatTotal();
       if (!got) throw new Error("no public total");
-      const shown = formatCount(got.n);
-      if (opensEl) opensEl.textContent = shown;
-      if (usersEl) usersEl.textContent = shown;
-      if (noteEl) {
-        const how = got.source === "html"
-          ? "from GoatCounter’s public site widget (#gcvc-views on TOTAL.html)"
-          : got.source === "json"
-            ? "from GoatCounter’s TOTAL.json"
-            : "from a sum of public per-page counters (TOTAL.json was 0 or unavailable)";
-        noteEl.textContent =
-          "Approximate public GoatCounter visitor total (" + how + "). " +
-          "GoatCounter’s widget is one visitor figure — opens and users both show that number, " +
-          "not two different metrics. Not DoD adoption figures.";
-      }
+      if (visitorsEl) visitorsEl.textContent = formatCount(got.n);
     } catch (e) {
       dash();
       if (noteEl) {

tests/test_site.py

@@ -454,10 +454,20 @@ def test_chrome_installs_goatcounter_and_fetches_public_totals(self):
         match = re.search(r'id=["\']gcvc-views["\'][^>]*>([^<]*)', snippet)
         self.assertEqual(match.group(1).strip(), "13")
 
-    def test_landing_labels_one_goatcounter_visitor_total(self):
+    def test_landing_shows_one_visitor_total(self):
         html = (ROOT / "docs" / "index.html").read_text(encoding="utf-8")
-        self.assertIn("same total, not a second metric", html)
-        self.assertIn("GoatCounter’s public visitor total", html)
+        landing = html.split('id="site-activity"', 1)[1].split('id="tech-notes"', 1)[0]
+        self.assertIn('data-stat="visitors"', landing)
+        self.assertIn("Site visitors", landing)
+        self.assertIn("People who opened this site (GoatCounter).", landing)
+        self.assertIn("not a count of people who downloaded or ran the scanner", landing)
+        self.assertIn("https://stig-hsaxena.goatcounter.com", landing)
+        self.assertNotIn("data-stat=\"opens\"", landing)
+        self.assertNotIn("data-stat=\"users\"", landing)
+        self.assertNotIn("same total, not a second metric", landing)
+        self.assertNotIn("Opens / pageviews", landing)
+        self.assertNotIn("Users / unique visitors", landing)
+        self.assertNotIn("Visitors/Users", landing)
 
     def test_docs_pages_include_the_shared_goatcounter_config(self):
         for name in CONTACT_PAGES:
@@ -469,11 +479,9 @@ def test_landing_has_honest_site_activity_section(self):
         html = (ROOT / "docs" / "index.html").read_text(encoding="utf-8")
         self.assertIn('id="site-activity"', html)
         self.assertIn("Site activity", html)
-        self.assertIn("data-stat=\"opens\"", html)
-        self.assertIn("data-stat=\"users\"", html)
-        self.assertIn("pageviews", html.lower())
-        self.assertIn("unique visitors", html.lower())
-        self.assertIn("not Department of Defense adoption", html)
+        self.assertIn("data-stat=\"visitors\"", html)
+        self.assertIn("Site visitors", html)
+        self.assertIn("Not Department of Defense adoption", html)
         self.assertIn("—", html)
         self.assertNotIn("countapi", html.lower())