Manifest position 26 · CrUX rank bucket 1000

https://boardgamearena.com

Coverage complete

Complete atomic coverage of all 58 catalog checks across six representative public paths. Authenticated gameplay, payment, account management, and destructive account actions were intentionally not covered because they require credentials or side effects.

Attempts
1 / 3
Judged checks
58 / 58
Blocked
0
Not run
0
This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / checkStatusConfidenceEvidence or reason
respect-user-preferences
respects-color-scheme
issueshighScreenshot comparison under emulated dark preference shows the same light #f7f7f7 landing surface; CSS only switches when an html.dark class is set, so the system preference does not select dark mode.
F01 medium: Honours prefers-color-scheme: a usable dark mode exists and is driven by the user's preference (color-scheme / prefers-color-scheme / light-dark()), not hard-coded light only.
respect-user-preferences
respects-reduced-motion
issueshighThe reduced-motion probe matched prefers-reduced-motion: reduce but still found infinite 1.75s fa-blink animations and many non-zero transitions.
F02 medium: Honours prefers-reduced-motion: non-essential animations and auto-advance are reduced or removed when the user asks for less motion.
respect-user-preferences
respects-contrast
passhighForced-colors plus prefers-contrast screenshot preserves visible text, links, primary action, and focusable chrome.
implement-natural-interactions
view-transitions
issuesmediumCSS/DOM probe found no view-transition rules and route changes use full, abrupt document swaps across the representative navigation.
F03 low: State and route changes use View Transitions (including same-document, cross-document and scroll-driven/staggered) rather than instant, jarring swaps.
implement-natural-interactions
scroll-driven-animations
not-applicablehighNone of the representative public templates uses parallax, scrollytelling, or scroll-linked reveal motion, so there is no scroll-driven effect to implement.
implement-natural-interactions
physical-gestures
issuesmediumThe game listing exposes horizontally paged carousels, but CSS inspection found no scroll-snap or overscroll declarations; movement is handled by custom arrow controls.
F04 low: Gesture-driven interactions and entry/exit motion feel native (declarative overscroll/scroll-snap, physics-based easing, animating to intrinsic sizes, pull/swipe gestures) rather than fighting the platform with custom pointer handlers.
provide-guided-navigation
scroll-state-aware-chrome
issuesmediumScreenshots and CSS show static fixed navigation without a scroll-progress or scroll-state response despite long pages of 5,877 to 9,259 CSS px.
F05 low: Sticky/affixed UI reacts to scroll state and position (e.g. the new scroll-state(scrolled) query, shrinking headers, progress indicators) so chrome responds to position instead of static or JS-driven toggling.
provide-guided-navigation
anchored-positioning
issuesmediumMenus and panels are implemented with fixed/absolute positioning in the captured CSS; no anchor-name, position-anchor, or position-try declarations were found.
F06 low: Tooltips, popovers and menus use CSS anchor positioning (with fallback positions) so they stay attached and reposition correctly rather than being manually positioned.
provide-guided-navigation
directs-attention
passhighActive top-level sections are highlighted, listing headings are prominent, and game-detail Learn/Play actions provide clear directional cues.
maximize-content-reduce-noise
no-intrusive-interruptions
passhighNo load-time interstitial or consent wall obscured content on any of the five representative public templates.
maximize-content-reduce-noise
semantic-dismissible-primitives
issueshighDOM probe found zero dialog, popover, or details elements while signup and menu overlays are custom containers, so modal/disclosure semantics and platform light-dismiss are absent.
F07 medium: Overlays and rich controls use the right primitive: popover (with declarative light-dismiss) for transient UI, dialog for modal flows, details for disclosure, native-but-branded selects and pickers, rather than ad-hoc divs.
maximize-content-reduce-noise
reduced-chrome
passmediumThe landing, news, listing, and game-detail templates devote their main regions to games and editorial content with compact global navigation.
adapt-to-the-form-factor
responsive-no-horizontal-scroll
passhighAt 360x800, both landing and listing layout metrics report scrollWidth=clientWidth=360 with viewport meta present and zero horizontal overflow.
adapt-to-the-form-factor
component-level-responsiveness
issuesmediumThe layout adapts at viewport breakpoints, but live CSS inspection found no @container/container-type rules for reused game cards and controls.
F08 low: Components adapt to their container with container queries (incl. anchored container queries) and content/state-based styling where reused at different sizes, not only global viewport breakpoints.
adapt-to-the-form-factor
input-modality-aware
issueshighFocus probes retain a native outline, but Lighthouse target-size audits fail and the live probe found many links only 14 to 15px tall.
F09 medium: Touch targets are adequately sized and hover-only affordances have a non-hover fallback, and keyboard focus is visible, so the UI works for touch, pointer and keyboard alike.
support-core-task-success
clear-purpose-and-primary-action
passhighThe first viewport states the offer, its free/browser-based nature, and a single prominent Start playing now action.
support-core-task-success
primary-flow-completion
passmediumThe public primary journey from landing to game discovery, a specific game, and account creation is reachable through real links with clear Learn, Play, and Create an account actions; account submission itself was not performed to avoid creating test data.
support-core-task-success
clear-system-state-and-recovery
passhighAn invalid URL renders a clear not-found state with a homepage recovery link, and the signup surface includes support and login alternatives.
be-fast-and-stable
good-core-web-vitals
issueshighLighthouse measured homepage LCP 28.5s/TBT 600ms, gamelist LCP 28.4s/CLS 0.159, and signup LCP 23.2s/CLS 0.158.
F10 high: Core Web Vitals are in the good range: LCP is fast, interaction latency (INP) is low, and CLS is minimal; work is prioritised and deferred sensibly.
be-fast-and-stable
visual-stability
issueshighMobile layout observers measured CLS 0.287 on home and 0.299 on gamelist; all 17 inspected images lacked width/height attributes.
F11 medium: No cumulative layout shift from late content (images, banners, fonts) that arrives without reserved space.
be-fast-and-stable
efficient-main-thread
issueshighTrace recorded three long tasks and 59.66ms TBT under a fast local run; throttled Lighthouse measured 600 to 710ms TBT.
F12 medium: The main thread is not blocked by long tasks or heavy scripting; work is deferred, chunked, prioritised, or moved off-thread.
be-fast-and-stable
efficient-resource-delivery
issueshighHAR recorded 4.99MB transferred, including three parser-blocking stylesheets and three classic parser-inserted scripts without async/defer/module confirmed by DOM.
F13 medium: Critical resources are delivered efficiently: cache headers are useful, render-blocking chains are short, fonts do not block or shift text, HTTP delivery is modern, and network dependency trees do not delay the main content.
be-fast-and-stable
trim-unused-and-duplicate-code
issueshighThe landing page ships 3.88MB of JavaScript; sveltec alone is 2.12MB and legacy Dojo plus analytics bundles load before interaction.
F14 medium: The page does not ship large unused or duplicated JavaScript/CSS, avoidable legacy bundles, or third-party code that dominates the load without user value.
be-inclusive
names-roles-labels
issueshighLighthouse fails image-alt, link-name, label-content-name-mismatch, and signup form-label audits; the listing probe shows numerous image-only game links with no accessible name.
F15 high: Interactive elements have accessible names, correct roles, and form fields have labels; images have alt text where meaningful; canvas/expressive content is exposed to assistive technology.
be-inclusive
sufficient-contrast
issueshighLighthouse color-contrast audit fails on all three tested templates.
F16 medium: Text and essential UI meet WCAG colour-contrast minimums against their background.
be-inclusive
structure-and-focus
issueshighAll tested templates have zero main/navigation landmarks and no h1; Lighthouse fails landmark-one-main. Keyboard focus remains visible, but page structure is not logical for assistive technology.
F17 medium: Heading and landmark structure is logical, focus order follows reading order, keyboard focus is always visible, and interactive state survives DOM moves.
be-inclusive
legible-text
passmediumDesktop and mobile screenshots show readable line lengths, unclipped primary copy, and responsive wrapping across the representative templates.
be-inclusive
zoom-reflow-targets-and-media
issueshighNarrow screenshots reflow without horizontal overflow, but Lighthouse target-size fails and many interactive links measure only 14 to 15px high. No essential media requiring captions appears in the audited paths.
F18 medium: The experience remains usable when zoomed or reflowed, touch targets are large enough, media has captions or equivalents where needed, and the viewport does not prevent user scaling.
follow-best-practices
no-console-errors
passmediumLighthouse did not report a console-errors or runtime exception failure on the three tested templates.
follow-best-practices
sound-document-and-assets
issueshighDirect probes confirm standards mode and an HTML doctype, but image audit reports 17/17 missing dimensions, 16 legacy formats, and one oversized asset.
F19 medium: Valid doctype and charset, images sized with correct aspect ratio, no deprecated APIs misused, and CSS/HTML are well structured and not needlessly repetitive. (HTTPS, CSP and permission hygiene are judged under be-private-and-secure, not here.)
follow-best-practices
browser-platform-hygiene
issueshighLighthouse reports five BFCache failure reasons and missing source maps for large first-party JavaScript on all tested templates.
F20 medium: The page uses the platform cleanly: no deprecated APIs, no avoidable BFCache blockers, no broken source maps or inspector issues, no stale vulnerable libraries, no paste-prevention on inputs, and no notification/geolocation prompts on load.
be-discoverable
title-and-description
issueshighHomepage and game detail have descriptive metadata, but /gamelist has an empty meta description.
F21 medium: The page has a unique, descriptive <title> and a meta description.
be-discoverable
crawlable-and-mobile-friendly
issueshighViewport meta and robots.txt are present, but Lighthouse finds non-crawlable anchors on /gamelist and the DOM contains many href="#" pseudo-links with generic or empty text.
F22 medium: Links are crawlable (real href), there is a viewport meta tag, robots does not block indexing, and link text is descriptive.
be-discoverable
canonical-and-indexing-signals
issueshighThe public /gamelist page canonically points to the homepage and /sitemap.xml returns a 404, weakening indexing consistency.
F23 medium: Public pages expose the indexing signals search engines need: successful HTTP status, canonical URL when appropriate, hreflang for localized variants, robots/sitemap consistency, and no accidental noindex/noarchive policy.
be-discoverable
structured-and-shareable-metadata
issuesmediumGame detail has accurate Open Graph metadata but no JSON-LD for the visible game entity; homepage also has no structured data.
F24 low: Where the page represents an article, product, organization, event, place or other rich entity, structured data and share-preview metadata accurately describe the visible content.
be-private-and-secure
secure-transport-and-headers
issueshighHTTPS, HSTS and nosniff are present, but CSP permits unsafe-inline and unsafe-eval; analytics cookies use SameSite=None and two are not Secure.
F25 high: Served over HTTPS with a sensible Content-Security-Policy and secure, SameSite cookies; no mixed content or obvious transport/header smells.
be-private-and-secure
data-minimisation-and-third-parties
issueshighTracker capture found nine third-party origins and active Google Tag Manager/DoubleClick; HAR records analytics and consent SDK traffic on first load.
F26 medium: No over-collection of user data, no leaky third parties, and analytics/background data collection is minimised and batched rather than chatty or session-wide by default.
be-private-and-secure
in-context-permissions-and-modern-auth
issuesmediumNo permission prompt fired on load, but the public signup offers email/social identity only and no passkey/WebAuthn path was exposed. The scanned Google API key is treated as a likely public client key, not a secret.
F27 low: Permission prompts are requested in context (not on load), and authentication uses modern, phishing-resistant methods (passkeys / WebAuthn) where relevant rather than passwords alone.
be-private-and-secure
defensive-browser-policies
issueshighHSTS, X-Frame-Options and frame-ancestors are set, but Referrer-Policy and Permissions-Policy are missing and CSP retains unsafe-inline/unsafe-eval.
F28 medium: Browser-enforced defenses are configured where appropriate: HSTS, clickjacking protection (frame-ancestors / X-Frame-Options), Trusted Types for XSS-sensitive apps, origin isolation, privacy-preserving third-party cookie posture, and sensible Referrer-Policy / Permissions-Policy.
be-resilient
progressive-enhancement
passhighDiscoverability comparison reports 94% rendered-word coverage in raw server HTML, isJsShell=false, and visible crawler rendering.
be-resilient
resilient-runtime-behaviour
passmediumFive public templates loaded to coherent states at desktop/mobile widths; menus and content were not visibly clipped, and no runtime exceptions were reported.
be-resilient
offline-and-installable
passmediumA manifest with standalone display, start_url and complete icon set is linked, and navigator.serviceWorker is available on the loaded page. Offline gameplay is intrinsically networked and was not treated as required.
be-resilient
network-and-http-failure-states
passhighA representative unknown route renders a clear, branded error state and a direct homepage recovery action rather than a blank shell.
be-internationalised
lang-dir-and-logical-properties
issueshighThe page has lang=en, dir=ltr and hreflang links for many locales, but loaded CSS inspection found 22 physical left/right rules and zero logical-property rules.
F29 medium: Correct lang and dir attributes, logical CSS properties (inline/block) rather than physical left/right, and translation-ready markup so the layout and reading order survive other languages and writing modes.
be-internationalised
locale-aware-data
passmediumThe site exposes many locale-specific hosts via hreflang and a language switcher; representative English content and locale metadata agree.
be-internationalised
time-zone-correctness
not-applicablehighThe representative unauthenticated landing, listing, game detail, signup, and news first-view states expose no user-scheduled or timezone-sensitive event data to judge.
be-trustworthy
no-dark-patterns
passhighSignup plainly states that it is free, presents equivalent identity choices without preselection, links the privacy policy, and provides a visible existing-account route.
be-trustworthy
humane-error-handling
issueshighSignup email fields have no associated labels or required semantics; clicking Create an account with an empty field produced no visible, accessible inline recovery message in the captured state.
F30 medium: Forms prevent and recover from mistakes humanely: validate after interaction (not prematurely), give clear required-field feedback, announce errors accessibly, and signal invalid fields visibly rather than blaming the user.
be-trustworthy
trustworthy-input-assistance
passhighPublic account inputs expose autocomplete=email and autocomplete=username tokens.
be-trustworthy
safe-commercial-and-account-flows
passmediumThe public account entry clearly identifies free registration, privacy handling, social alternatives, and the route back to login; no subscription continuity or hidden pricing appeared.
be-sustainable
optimised-assets
issueshighImage audit reports 16 legacy-format images, 8 without responsive sources, 16 below-fold images without lazy loading, and one oversized logo.
F31 medium: Images and decorative assets are optimised and served at appropriate resolutions; decorative pseudo-element imagery and heavy decorative images are resolution-optimised rather than oversized.
be-sustainable
no-wasteful-work
issueshighThe landing page transfers 4.99MB and opens analytics, consent, Sentry and realtime/legacy runtime scripts before the user interacts; script transfer alone is 3.88MB.
F32 medium: Background work and fetching are not wasteful: background processing is efficient and de-prioritised, and the lightest technique that achieves the result is preferred over heavy or redundant work.
be-sustainable
third-party-and-media-budget
issueshighHAR attributes nearly all 4.99MB to non-main origins and tracker evidence finds nine third-party origins; Google tag scripts alone transfer about 324KB.
F33 medium: Third-party scripts, fonts, video, audio, animation and heavy media are proportionate to the user value they provide; autoplay or background media is avoided unless essential and resource use is cached or deferred where possible.
be-agent-ready
structured-agent-capabilities
not-applicablehighNo declared agent-facing surface or WebMCP intent exists for the public entertainment pages; absence is treated as an emerging opportunity, not a failure.
be-agent-ready
on-device-inference
not-applicablehighThe audited public discovery and signup tasks do not require summarisation or language-model inference, so built-in AI is not applicable.
be-memory-efficient
no-leak-under-repeated-interaction
passmediumAfter ten filter open/Escape cycles, heap self-size fell from 64.0MB to 58.5MB; node count rose only 0.56%, which is within cross-navigation snapshot variance and does not show unbounded retained growth.
be-memory-efficient
bounded-footprint
issuesmediumThe gamelist baseline heap contains about 950,016 nodes and 64.0MB self-size before interaction, disproportionate for a public catalogue view and consistent with its multi-megabyte runtime.
F34 low: Heap size and DOM node count are reasonable for what the page is; the footprint is proportionate rather than bloated.
be-memory-efficient
no-detached-dom-or-unbounded-listeners
passmediumNo Detached* constructor appears among leading heap constructors; after repetition closures changed by only 7 (37,472 to 37,479) and arrays by 84, with no monotonic leak signal.

Provenance

Canonical report: results/atomic/reports/0026-boardgamearena_com.json
Report SHA-256: 93bc2aac9bb62ad1bfd6e776067c1fd590bbcf477f0191c8b8c3af857f6309cc
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/boardgamearena_com/2026-07-17T22-21-08-514Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/boardgamearena_com/2026-07-17T22-21-08-514Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.