Manifest position 193 · CrUX rank bucket 1000

https://www.scribd.com

Coverage complete

Coverage-complete audit of seven representative public/unauthenticated paths. Logged-in reading, payment, cancellation, and account-management states were not entered because no test account or payment authorization was supplied; checks were judged only against exposed public surfaces.

Attempts
1 / 3
Judged checks
58 / 58
Blocked
0
Not run
0
This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / checkStatusConfidenceEvidence or reason
respect-user-preferences
respects-color-scheme
issueshighDark preference matched but root color-scheme remained normal and the primary dialog stayed light.
F02 medium: The site does not honor the user’s dark color-scheme preference.
respect-user-preferences
respects-reduced-motion
passhighThe emulated preference matched and document.getAnimations() returned no active animations.
respect-user-preferences
respects-contrast
passhighText, links, form controls, and focus outlines remained visible in the forced-colors/high-contrast capture.
implement-natural-interactions
view-transitions
issuesmediumThe route capture shows a direct swap and no authored view-transition rule was detected.
F03 low: Cross-page navigation swaps views without an authored View Transition.
implement-natural-interactions
scroll-driven-animations
passmediumNo scroll-linked decorative effect or main-thread scroll animation was present; ordinary page/document scrolling remained native.
implement-natural-interactions
physical-gestures
passmediumThe covered surfaces use native scrolling and platform controls; no custom pointer-driven gesture that fights scrolling was observed.
provide-guided-navigation
scroll-state-aware-chrome
passmediumPersistent header/search and the reader toolbar/page controls keep navigation context visible across long surfaces.
provide-guided-navigation
anchored-positioning
not-applicablemediumNo tooltip, edge menu, or transient popover requiring anchor positioning was exposed in the covered unauthenticated states; the only open overlay was the viewport-fixed consent modal.
provide-guided-navigation
directs-attention
passmediumCategory headings, reader page controls, and recovery links make location and the next destination apparent.
maximize-content-reduce-noise
no-intrusive-interruptions
issueshighThe consent dialog obscures most or all first-load content.
F01 high: The consent experience obscures the page on first load, especially on mobile.
maximize-content-reduce-noise
semantic-dismissible-primitives
passhighThe consent overlay is labelled role=dialog/aria-modal and exposes close, save, accept, and reject controls with visible focus.
maximize-content-reduce-noise
reduced-chrome
passmediumThe document reader gives the majority of its central viewport to the document; chrome remains compact and task-related.
adapt-to-the-form-factor
responsive-no-horizontal-scroll
passhighBoth mobile captures reported scrollWidth=clientWidth=360 with 0px horizontal overflow and a viewport meta tag.
adapt-to-the-form-factor
component-level-responsiveness
issuesmediumNo container query rules were detected although viewport reflow works.
F04 low: Responsive behavior is viewport-driven rather than component-aware.
adapt-to-the-form-factor
input-modality-aware
issueshighSeveral actions computed outline-style none and some targets were below 44×44 CSS pixels.
F05 medium: Several controls have weak keyboard focus indication or undersized touch geometry.
support-core-task-success
clear-purpose-and-primary-action
passhighHeadings and primary controls clearly identify explore/search, read/download, contribute/upload, and create-account purposes.
support-core-task-success
primary-flow-completion
passmediumA category exposes real document hrefs and the selected public document opens in the reader; signup exposes labelled email/password and federated paths. Account-only purchase/download completion was outside the unauthenticated public scope.
support-core-task-success
clear-system-state-and-recovery
passhighNative form validity returns actionable messages, polite/assertive live regions exist, and the 404 names the error and links back home/content.
be-fast-and-stable
good-core-web-vitals
issueshighLighthouse LCP was 18.6s and TBT 650ms; the separate trace LCP was 1.90s with 76ms TBT, indicating variable but unacceptable cold-load evidence.
F06 high: Cold-load performance is far outside the good user-experience range.
be-fast-and-stable
visual-stability
passhighObserved CLS was 0 on home and 0.0011 on the document, with image dimensions present.
be-fast-and-stable
efficient-main-thread
issueshighLighthouse TBT was 650ms; the separate trace recorded one 126ms long task.
F20 medium: Cold-load scripting blocks the main thread for too long.
be-fast-and-stable
efficient-resource-delivery
issueshighThe page transferred 2.85MB, including 2.13MB script; HTML was uncompressed and one head script was synchronous.
F07 medium: The critical network path includes excessive scripts and an uncompressed document response.
be-fast-and-stable
trim-unused-and-duplicate-code
issueshighLighthouse estimated 905KiB unused JavaScript and 28KiB unused CSS.
F08 medium: The landing page ships a large amount of unused JavaScript.
be-inclusive
names-roles-labels
issueshighLighthouse found category card label/content mismatches; axe found no additional violations.
F09 medium: Some category links expose accessible names that do not match their visible labels.
be-inclusive
sufficient-contrast
passhighaxe found no violations, Lighthouse scored accessibility 1.0, and essential UI remained visible in forced colors.
be-inclusive
structure-and-focus
issueshighCategory accessible-name mismatches and multiple controls with outline-style none prevent a fully reliable focus/name experience.
F05 medium: Several controls have weak keyboard focus indication or undersized touch geometry.
F09 medium: Some category links expose accessible names that do not match their visible labels.
be-inclusive
legible-text
passhighBody and heading copy uses readable sizing, spacing and wrapping without clipping across covered screenshots.
be-inclusive
zoom-reflow-targets-and-media
issueshighReflow succeeds without overflow, but the menu control is 24×40px and consent checkbox boxes are 16×16px. No required media-caption case was present.
F05 medium: Several controls have weak keyboard focus indication or undersized touch geometry.
follow-best-practices
no-console-errors
passhighLighthouse errors-in-console scored 1 with no recorded items.
follow-best-practices
sound-document-and-assets
passhighThe page uses HTML doctype, UTF-8, correctly proportioned/dimensioned modern-format images, and Lighthouse aspect-ratio audits passed.
follow-best-practices
browser-platform-hygiene
passhighDeprecation, BFCache, geolocation/notification-on-load, paste prevention, and source-map audits all scored as passing; security findings are recorded under the dedicated security principle.
be-discoverable
title-and-description
passhighThe homepage has a descriptive title and meta description.
be-discoverable
crawlable-and-mobile-friendly
issueshighLinks are crawlable and viewport metadata is present, but Lighthouse found two generic Learn more links.
F10 low: A small set of links uses generic text.
be-discoverable
canonical-and-indexing-signals
passhighThe public page returns 200, declares a canonical, exposes hreflang links, and robots.txt points to locale-specific sitemap indexes without blocking ordinary indexing.
be-discoverable
structured-and-shareable-metadata
passhighThe homepage exposes WebSite SearchAction and Organization JSON-LD plus matching og:title, og:description, and og:site_name.
be-private-and-secure
secure-transport-and-headers
issueshighHTTPS/HSTS and no exposed secrets pass, but CSP, nosniff and cookie hardening are incomplete.
F11 high: Important browser security policies and cookie protections are missing.
be-private-and-secure
data-minimisation-and-third-parties
issueshigh69/72 requests and 2.46MB were non-www origins; five known trackers were active.
F12 high: Third-party tracking and integration code dominates the initial load.
be-private-and-secure
in-context-permissions-and-modern-auth
issuesmediumNo permission prompt occurred on load, but signup offered no passkey/WebAuthn path.
F13 medium: Public signup supports password and federated identity but exposes no passkey route.
be-private-and-secure
defensive-browser-policies
issueshighHSTS is present, but CSP/frame protection, nosniff, Referrer-Policy, Permissions-Policy, and narrow cookie posture are incomplete.
F11 high: Important browser security policies and cookie protections are missing.
be-resilient
progressive-enhancement
passhighRaw HTML returned 200 with 100% rendered-content word coverage, the H1 and description present, and no empty JS shell.
be-resilient
resilient-runtime-behaviour
passmediumCovered overlays stay within the viewport with scrolling, mobile templates do not overflow, and navigation failures resolve to a recoverable 404.
be-resilient
offline-and-installable
not-applicablehighThe public website is a server-rendered, network-dependent document marketplace with native apps promoted separately; an offline/installable web-app promise is not part of the covered public experience.
be-resilient
network-and-http-failure-states
passhighAn unknown route produces a clear Page not found state, explanation, home/content recovery links, and no broken shell.
be-internationalised
lang-dir-and-logical-properties
issueshighThe advertised Spanish URL delivered English lang/content at the www URL.
F14 medium: The advertised Spanish locale target resolves to English content in a fresh browser session.
be-internationalised
locale-aware-data
issuesmediumThe explicit Spanish target did not preserve the requested locale, so locale-aware delivery could not be established even though hreflang variants are advertised.
F14 medium: The advertised Spanish locale target resolves to English content in a fresh browser session.
be-internationalised
time-zone-correctness
not-applicablehighThe covered public landing, listing, document, upload, and signup surfaces expose no events, schedules, or user-facing times for which time-zone or DST handling applies.
be-trustworthy
no-dark-patterns
issueshighAll optional advertising/personalisation purposes are checked by default, though a reject-all action is present.
F15 medium: Optional consent purposes are preselected by default.
be-trustworthy
humane-error-handling
passhighEmpty required fields produce browser-native messages, with dedicated polite/assertive live regions for email and password feedback.
be-trustworthy
trustworthy-input-assistance
passhighEmail and password are labelled, required, and use autocomplete=email/new-password; newsletter consent is optional and unchecked.
be-trustworthy
safe-commercial-and-account-flows
passmediumThe public account entry clearly states one subscription for Scribd and Slideshare, offers multiple sign-up methods, and leaves marketing consent off; no sensitive account action was available without authentication.
be-sustainable
optimised-assets
issueshigh33/36 images had no srcset and two were oversized, despite modern formats and dimensions.
F16 medium: Most images lack responsive source selection.
be-sustainable
no-wasteful-work
issueshighInitial load fetches large payment, survey, social and duplicate analytics bundles that are not needed for first content.
F17 medium: Third-party scripts consume a disproportionate share of page resources.
be-sustainable
third-party-and-media-budget
issueshighThird-party origins consumed 2.46MB, including 858KB from Google Tag Manager.
F17 medium: Third-party scripts consume a disproportionate share of page resources.
be-agent-ready
structured-agent-capabilities
issueshighNo WebMCP/agentic tools were present and robots explicitly blocks several major AI crawlers.
F18 low: Document capabilities are not exposed through structured agent tools, and several major AI crawlers are explicitly blocked.
be-agent-ready
on-device-inference
not-applicablehighNo user-facing summarisation or generative feature is offered in the covered public UI, so built-in on-device inference has no current task to enhance.
be-memory-efficient
no-leak-under-repeated-interaction
passmediumHeap self-size changed from 58.29MB to 59.11MB (+1.4%) and nodes from 1,058,563 to 1,069,632 (+1.0%); across isolated captures this is small enough not to establish unbounded retained growth.
be-memory-efficient
bounded-footprint
issuesmediumThe two-page reader baseline had 1.06M heap nodes and 58.3MB self-size; post-scroll remained similarly large.
F19 medium: The public two-page document viewer starts with a large JavaScript heap graph.
be-memory-efficient
no-detached-dom-or-unbounded-listeners
passmediumNeither summary surfaced Detached* constructors among the largest retained constructor groups, and repeated scrolling did not produce a large population jump; intentional caches and isolated-run noise limit confidence.

Provenance

Canonical report: results/atomic/reports/0193-www_scribd_com.json
Report SHA-256: d21d73e0881e0d6c42f74eb264258049f3cdf17c420136707b1b529de576645e
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_scribd_com/2026-07-19T01-52-01-764Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_scribd_com/2026-07-19T01-52-01-764Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.