Audit Result

UUID: 019e203c-6ba7-7203-ae8a-d43f7d278964

Share on X Recheck Back to history
fosshunter.com

https://fosshunter.com/

Scanned 3 months ago

78
Fair Score
39 total checks
Passed
26
Warnings
9
Errors
4

Meta Information

  • Title Tag Pass

    Found 39 characters. Length is optimal.

  • Meta Description Pass

    Found 154 characters. Good snippet length.

  • Canonical URL Pass

    Canonical found: https://fosshunter.com

  • Favicon Error

    Favicon tag found, but file is missing or inaccessible (403).

    Fix: Ensure https://fosshunter.com/favicon.ico returns HTTP 200 and matches your favicon link tag.

  • Viewport Meta Pass

    Viewport configured: width=device-width, initial-scale=1

  • HTML Lang Pass

    Language declared as "en".

Content Structure

  • H1 Tag Pass

    Exactly one H1 found: "Find open-source tools worth evaluating.".

  • Heading Hierarchy Pass

    Valid heading flow across 11 headings.

  • Image Alt Text Pass

    All 0 images include alt text.

Technical Optimization

  • HTTPS Pass

    Page is served over HTTPS.

  • HSTS & HTTPS Redirect Warning

    2 HTTPS hardening issues detected.

    • • HSTS is missing includeSubDomains.
    • • Could not probe the HTTP version of this page.
    • • Strict-Transport-Security: max-age=15768000;

    Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

  • Security Headers Pass

    Core security headers were detected.

    Full HTTP headers (18)
    • • alt-svc: h3=":443"; ma=86400
    • • cache-control: no-cache, private
    • • cf-cache-status: DYNAMIC
    • • cf-ray: 9faff1c5df4dca91-IAD
    • • content-encoding: zstd
    • • content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: data:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: https: blob:; connect-src 'self' https:; worker-src 'self' blob:; frame-src 'self' https:; frame-ancestors 'self';
    • • content-type: text/html; charset=utf-8
    • • date: Wed, 13 May 2026 07:28:07 GMT
    • • nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
    • • permissions-policy: camera=(), microphone=(), geolocation=(), usb=(), payment=(self)
    • • referrer-policy: strict-origin-when-cross-origin
    • • report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iTm2vl0vD5Q0MFVFK%2FC5jQfeT3IU9hKrq0CjAezXrtFkx7DHl0PUhM8o%2F%2F1sJDQG%2BSeVtCX9ZW27C0oVCOvJEUz9AYeNs7X%2BWGt2iIblgq1wFPuo8uLGPfYo9f7%2BJjotLw9sop7csv4Z%2FTphsQ%3D%3D"}]}
    • • server: cloudflare
    • • strict-transport-security: max-age=15768000;
    • • vary: accept-encoding
    • • x-content-type-options: nosniff
    • • x-frame-options: SAMEORIGIN
    • • x-xss-protection: 1; mode=block
  • CSP Quality Error

    4 CSP hardening issues detected.

    • • script-src/default-src permits 'unsafe-inline'.
    • • script-src/default-src permits 'unsafe-eval'.
    • • CSP is missing object-src 'none'.
    • • CSP is missing a base-uri restriction.
    • • Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: data:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: https: blob:; connect-src 'self' https:; worker-src 'self' blob:; frame-src 'self' https:; frame-ancestors 'self';

    Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

  • Cookie Security Pass

    No first-party cookies were set during the initial page load.

  • Server Version Disclosure Pass

    Server response headers do not expose version tokens.

  • Cloudflare Proxy Pass

    Domain appears to be behind Cloudflare.

    • • server: cloudflare
    • • cf-cache-status: DYNAMIC
    • • cf-ray: 9faff1c5df4dca91-IAD
  • Perceived Load Time Pass

    Loaded in 1.31s (perceived).

  • Render Blocking Resources Warning

    0 scripts and 2 styles may block rendering.

    • • style: https://fonts.bunny.net/css?family=instrument-sans:400,500,600,700|space-grotesk:500,700
    • • style: https://fosshunter.com/build/assets/public-CQqzabSc.css

    Fix: Defer non-critical scripts and inline critical CSS to improve first paint speed.

  • Compression Pass

    Text-like assets appear compressed.

  • Robots.txt Error

    robots.txt missing or inaccessible (403).

    Fix: Create a robots.txt file at https://fosshunter.com/robots.txt and allow intended crawlers.

  • Sitemap File Warning

    Sitemap missing or inaccessible at https://fosshunter.com/sitemap.xml (403).

    Fix: Publish a sitemap.xml and reference it in robots.txt with: Sitemap: https://fosshunter.com/sitemap.xml

  • Crawl Directives Pass

    Robots meta found: max-snippet:-1,max-image-preview:large,max-video-preview:-1

Accessibility Basics

  • Form Labels Pass

    All 1 controls are labeled.

  • Landmarks Pass

    Header, nav, main, and footer landmarks are present.

  • Tap Target Size Warning

    12 interactive elements appear smaller than 48px.

    • • a.public-nav-link (Home) - 63x36px
    • • a.public-nav-link (Tools) - 58x36px
    • • a.public-nav-link (Submit) - 72x36px
    • • a.public-nav-link (Categories) - 96x36px
    • • a.public-nav-link (About) - 64x36px
    • • button.public-theme-button (Light) - 36x36px
    • • button.public-theme-button (Dark) - 36x36px
    • • button.public-theme-button (System) - 36x36px
    • • a.public-home-chip (Accounting 8) - 139x31px
    • • a.public-home-chip (Agentic Development 3) - 218x31px
    • • a.public-home-chip (AI Automation 11) - 159x31px
    • • a.public-home-chip (ai gateway 2) - 131x31px

    Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Social & Rich Results

  • Open Graph Basics Pass

    Core Open Graph tags are present.

  • Open Graph Image Warning

    og:image is missing.

    Fix: Add <meta property="og:image" content="https://..."> with a high-quality share image.

  • Twitter Card Pass

    twitter:card set to summary.

  • Structured Data Pass

    JSON-LD schema detected.

  • PWA Metadata Warning

    Manifest or Apple touch icon is missing.

    Fix: Link your web app manifest and apple-touch-icon for improved install/share experiences.

  • Open Graph/Twitter Quality Warning

    2 social preview quality issues detected.

    • • ISSUE: Use an absolute URL for og:image or twitter:image.
    • • ISSUE: twitter:card should be summary_large_image for richer previews.
    • • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
    • • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
    • • GUIDELINE: Optimal preview image size: 1200x630 pixels.
    • • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
    • • GUIDELINE: Optimal preview image file size: under 5 MB.
    • • GUIDELINE: Recommended twitter:card: summary_large_image.

    Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

Links Analysis

  • Internal Links Error

    13 internal links returned errors.

    • • https://fosshunter.com/ (HTTP 403)
    • • https://fosshunter.com/tools (HTTP 403)
    • • https://fosshunter.com/submit (HTTP 403)
    • • https://fosshunter.com/categories (HTTP 403)
    • • https://fosshunter.com/about (HTTP 403)
    • • https://fosshunter.com/auth/google/redirect (HTTP 403)
    • • https://fosshunter.com/tools?category=accounting (HTTP 403)
    • • https://fosshunter.com/tools?category=agentic-development (HTTP 403)
    • • https://fosshunter.com/tools?category=ai-automation (HTTP 403)
    • • https://fosshunter.com/tools?category=ai-gateway (HTTP 403)
    • • https://fosshunter.com/tools/openclaw (HTTP 403)
    • • https://fosshunter.com/tools/n8n (HTTP 403)
    • • https://fosshunter.com/tools/hermes-agen (HTTP 403)

    Fix: Fix or remove the listed internal URLs, and ensure routes/pages return 200 responses.

  • External Links Warning

    2 external links returned errors or timed out.

    • • https://midteknologi.com/ (HTTP 403)
    • • https://cekgan.com/onidel (HTTP 403)

    Fix: Replace dead external URLs or point to working alternatives.

  • Link Format Warning

    1 links are empty, invalid, or placeholder-only.

    • • href="#"

    Fix: Replace empty/#/javascript href values with real destinations or use buttons for non-navigation actions.

Performance & Runtime