Manifest position 309 · CrUX rank bucket 1000

https://bit.ly

Coverage complete

Coverage-complete representative audit of the redirected bitly.com public marketing, product, pricing, article, signup and error templates.

Attempts

1 / 3

Judged checks

58 / 58

Blocked

Not run

This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / check	Status	Confidence	Evidence or reason
respect-user-preferences `respects-color-scheme`	issues	high	Dark emulation produced the same visual/bytes; no dark rules and color-scheme is normal. F01 medium: The public site ignores the user’s dark color-scheme preference.
respect-user-preferences `respects-reduced-motion`	pass	medium	The condition matched and document.getAnimations() returned no running animations on load.
respect-user-preferences `respects-contrast`	pass	medium	Controls and text remain visible under increased contrast; stylesheet probing found a contrast media rule.
implement-natural-interactions `view-transitions`	issues	medium	No view-transition CSS was found and tested route changes use ordinary full-page navigation. F02 low: Route and major state changes do not use View Transitions.
implement-natural-interactions `scroll-driven-animations`	not-applicable	high	No scroll-linked animation was present on sampled paths, so there is no such effect to implement declaratively.
implement-natural-interactions `physical-gestures`	not-applicable	high	The representative paths use links, forms and buttons rather than custom swipe/pull interactions.
provide-guided-navigation `scroll-state-aware-chrome`	issues	medium	The page is 8,568 px tall but offers static chrome and no scroll-state/timeline cue. F03 low: Long pages provide no scroll-state-aware orientation.
provide-guided-navigation `anchored-positioning`	not-applicable	medium	No tooltip or anchored transient overlay was presented in the sampled journeys.
provide-guided-navigation `directs-attention`	pass	high	First views have strong descriptive headings/CTAs, and the DOM contains a Skip Navigation link.
maximize-content-reduce-noise `no-intrusive-interruptions`	issues	high	The consent surface obscures most of the mobile viewport on home, pricing and article routes. F04 high: The cookie banner obscures most of the first mobile viewport on every marketing template.
maximize-content-reduce-noise `semantic-dismissible-primitives`	issues	high	The visible consent overlay is implemented with neither dialog nor popover (counts are both zero). F05 medium: The consent overlay is custom chrome rather than a semantic dialog.
maximize-content-reduce-noise `reduced-chrome`	pass	high	After dismissal, primary content dominates the viewport and header chrome is compact.
adapt-to-the-form-factor `responsive-no-horizontal-scroll`	pass	high	At 360 px, horizontalOverflowPx is 0 and all sampled mobile templates reflow without clipping.
adapt-to-the-form-factor `component-level-responsiveness`	issues	medium	No container query was found in the loaded accessible CSS despite reusable modules. F06 low: The marketing component system does not use component-level responsiveness.
adapt-to-the-form-factor `input-modality-aware`	issues	high	Focus outline is visible, but 81/95 controls have a dimension under 44 px, including a 38×38 menu. F07 medium: Many visible controls have sub-44px touch dimensions.
support-core-task-success `clear-purpose-and-primary-action`	pass	high	Home, product, pricing, article and signup views communicate purpose and expose a clear next action.
support-core-task-success `primary-flow-completion`	pass	medium	The CTA leads to a concise labelled account form with email/password and Google options; no dead end appears before the irreversible account-creation step.
support-core-task-success `clear-system-state-and-recovery`	pass	high	Signup exposes a clear email error and password requirements; the 404 explains the error and corrective action.
be-fast-and-stable `good-core-web-vitals`	issues	high	Lighthouse LCP is 23.39 s with CLS 0.112 and TBT 251 ms; trace LCP is 7.31 s. F08 high: Cold-load LCP is far outside the good range.
be-fast-and-stable `visual-stability`	issues	high	CLS ranged from 0.084–0.112 with late shifts around 2.6–3.8 s. F09 medium: Late content causes measurable layout shift.
be-fast-and-stable `efficient-main-thread`	issues	high	Lighthouse TBT is 251 ms; trace captured an 81.85 ms long task. F10 medium: Main-thread work remains heavier than necessary.
be-fast-and-stable `efficient-resource-delivery`	issues	high	166 requests transfer 3.88 MB, with 24 stylesheets and a long parser-inserted VeryHigh-priority CSS chain. F11 high: The load has a large render-blocking and network dependency surface.
be-fast-and-stable `trim-unused-and-duplicate-code`	issues	high	Estimated waste is 704 KiB JS plus 447 KiB CSS. F12 high: The page ships substantial unused CSS and JavaScript.
be-inclusive `names-roles-labels`	pass	high	Lighthouse reported no label or image-alt failures; signup controls have visible labels and controls have accessible text/ARIA.
be-inclusive `sufficient-contrast`	issues	high	A preheading measures 4.19:1 instead of 4.5:1. F13 medium: A visible preheading misses WCAG contrast minimums.
be-inclusive `structure-and-focus`	issues	high	Landmarks and focus outline exist, but home/product lack H1 in probes and Lighthouse reports skipped heading levels. F14 medium: Heading hierarchy is inconsistent on key marketing templates.
be-inclusive `legible-text`	pass	high	Body copy has comfortable line length/spacing and no sampled text clipping; mobile headings wrap clearly.
be-inclusive `zoom-reflow-targets-and-media`	pass	medium	Viewport allows scaling, pages reflow without overflow, Lighthouse target-size audit has no failing nodes, and no media needing captions was found.
follow-best-practices `no-console-errors`	issues	high	Two identity-related errors were logged on unauthenticated public load. F15 low: The home page logs errors during normal load.
follow-best-practices `sound-document-and-assets`	issues	high	Doctype and UTF-8 pass, but 22 images lack dimensions and 10 are oversized. F16 medium: Image delivery has sizing and responsive-source gaps.
follow-best-practices `browser-platform-hygiene`	issues	medium	Deprecation/BFCache/prompt checks pass, but a broken Snowplow source map and Optimizely cookie inspector issue remain. F17 low: Developer diagnostics include a broken third-party source map and an inspector cookie issue.
be-discoverable `title-and-description`	pass	high	Home, product, pricing and article have unique descriptive titles/descriptions; SEO score is 0.92.
be-discoverable `crawlable-and-mobile-friendly`	pass	high	Real descriptive hrefs and viewport meta are present; robots welcomes general crawlers and Lighthouse found no crawlable-anchor failures.
be-discoverable `canonical-and-indexing-signals`	pass	high	Public samples return success, expose canonicals, localized alternates and indexable robots policy; robots lists two sitemap indexes.
be-discoverable `structured-and-shareable-metadata`	pass	high	Home/product/article expose JSON-LD; home has complete Open Graph/Twitter image metadata matching the visible Bitly entity.
be-private-and-secure `secure-transport-and-headers`	issues	high	HTTPS/HSTS and X-Frame-Options pass with no exposed secret, but CSP and nosniff are missing. F18 high: Core browser security headers are missing.
be-private-and-secure `data-minimisation-and-third-parties`	issues	high	19 third-party origins, five known trackers, and an Optimizely third-party cookie were observed. F19 high: The public landing page has a broad tracking and third-party footprint.
be-private-and-secure `in-context-permissions-and-modern-auth`	issues	high	No permission prompts fire on load, but signup has password/SSO only, no passkey signal, and empty autocomplete. F20 medium: Account creation lacks passkey support and useful credential autocomplete.
be-private-and-secure `defensive-browser-policies`	issues	high	HSTS and X-Frame-Options are present; CSP, Referrer-Policy, Permissions-Policy and nosniff are absent. F21 medium: Several defensive response policies are absent.
be-resilient `progressive-enhancement`	pass	high	91% of rendered content words exist in raw HTML; the site is not a JS shell and title/description survive without JS.
be-resilient `resilient-runtime-behaviour`	pass	medium	Sampled routes remain usable without cut-off horizontal content and the missing route resolves to a stable explanatory page.
be-resilient `offline-and-installable`	not-applicable	high	This is a public marketing MPA, not an installable application; no manifest is declared.
be-resilient `network-and-http-failure-states`	pass	high	The server returns HTTP 404 and a clear page explaining the wrong address and how to recover.
be-internationalised `lang-dir-and-logical-properties`	issues	high	lang and localized alternates exist, but dir is absent and no logical spacing/position rules were found. F22 medium: Localized routes exist, but the sampled CSS lacks logical-property and explicit direction support.
be-internationalised `locale-aware-data`	not-applicable	high	No user-facing dates, currencies, measurements or durations requiring locale formatting appear in the sampled core flow.
be-internationalised `time-zone-correctness`	not-applicable	high	No event scheduling, recurring time or timezone-sensitive value appears in the sampled flow.
be-trustworthy `no-dark-patterns`	pass	high	Accept All and Reject All have equal prominence, pricing purpose is explicit, and signup terms are visible before submission.
be-trustworthy `humane-error-handling`	pass	high	After interaction, email receives aria-invalid=true with “Please enter your email address”; password requirements are stated without blame.
be-trustworthy `trustworthy-input-assistance`	issues	high	Email/password labels exist but autocomplete values are empty. F23 medium: Signup inputs omit autocomplete assistance.
be-trustworthy `safe-commercial-and-account-flows`	pass	medium	Pricing intent, free-account action, SSO alternative and linked legal commitments are visible before account creation.
be-sustainable `optimised-assets`	issues	high	10 oversized, 15 legacy-format and 20 non-responsive images were detected. F24 medium: Several image assets are not delivered at an efficient resolution or format.
be-sustainable `no-wasteful-work`	issues	high	The marketing page ships 40 scripts/24 stylesheets with about 1.15 MiB estimated unused code. F25 high: The home page performs disproportionate work before interaction.
be-sustainable `third-party-and-media-budget`	issues	high	No autoplay media exists, but 19 third-party origins and multiple large tag-manager scripts dominate a 3.88 MB load. F26 high: Third-party code consumes a disproportionate share of the page budget.
be-agent-ready `structured-agent-capabilities`	issues	medium	Bitly advertises MCP/LLM integrations, but navigator.modelContext is not used on the sampled browser surface. F27 medium: Bitly markets MCP and AI integrations but exposes no browser-native structured capability on the audited public surface.
be-agent-ready `on-device-inference`	not-applicable	high	The core shortening, pricing and signup tasks do not require in-browser language-model or summarization inference.
be-memory-efficient `no-leak-under-repeated-interaction`	pass	medium	Node count fell 586,451→585,860 while total self size rose only 35.71→36.06 MB (~1%); closures also fell.
be-memory-efficient `bounded-footprint`	pass	medium	Heap summary is ~35.7 MB for the third-party-heavy marketing page and remains proportionate/stable after interaction.
be-memory-efficient `no-detached-dom-or-unbounded-listeners`	pass	medium	No Detached* constructor appears among top retained constructors; node/closure counts do not grow and no new interval was created.

Provenance

Canonical report: results/atomic/reports/0309-bit_ly.json
Report SHA-256: 5c75a8025ddc28538747bef6b912f9d8506c5a7899382a8bdef46f44aed77406
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/bit_ly/2026-07-19T21-17-49-437Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/bit_ly/2026-07-19T21-17-49-437Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.