[fleizean]

Summary

Replaces the five Open Graph images in src/frontend/public/og-image/ with a new, consistent set.

Why

The old previews showed an outdated UI and still advertised Maven and "5 registries". Link previews on X, LinkedIn, Slack and Discord are often the first thing people see of pkgdiff.

Changes

• home.png (site default): "Know what changes before you upgrade." with an upgrade card for express 4.19.2 → 5.3.0: breaking changes, a feature, the fixed res.redirect() XSS (CVE-2024-43796), and the Scorecard of 5.3.0
• og-image.png: the same design with "Open source · MIT" and the repository URL, meant for the GitHub social preview
• package.png: the release timeline of express, labelled with the categories pkgdiff stores for those versions
• blog.png: four recent posts, one per registry
• contributors.png: the top five of the contributors page with their mention counts
• All five share one layout: headline on the left, a card on the right, the four registries (NuGet, npm, PyPI, pub.dev) in the footer. 1200×630, rendered from HTML with the site's fonts (Inter, JetBrains Mono, Thicker for the wordmark).

Notes for reviewers

• The file names are unchanged, so no code changes. X, LinkedIn and Facebook cache previews per URL; after deploy, re-scrape with the LinkedIn Post Inspector and the Facebook Sharing Debugger if old previews keep showing.
• The vulnerability, Scorecard, date and mention figures come from the live pkgdiff.dev API on 2026-10-19.
• After merge, upload og-image.png as the repository's social preview (Settings → General → Social preview).

Checklist

• The pull request targets develop and is about one thing
• Commit messages follow Conventional Commits (feat(scope): ..., fix(scope): ...)
• CI is green (backend tests, frontend build and tests, dependency gate)
• Schema changes are EF Core migrations generated by the tool, not hand-edited
• A changed backend DTO has its TypeScript twin updated in src/frontend/src/app/core/models
• New dependencies are justified and their lock files are updated in the same commit
• No secrets, tokens or personal data in code, logs or this description
• Code comments are kept to a minimum; the reasoning lives in this description