Manifest position 574 · CrUX rank bucket 1000
https://services.gst.gov.in
Coverage complete
Coverage complete for 58 checks across four representative public templates plus an invalid-route recovery state. Authenticated taxpayer-only screens were excluded because credentials were not supplied.
Attempts
1 / 3
Judged checks
58 / 58
Blocked
0
Not run
0
This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.
All 58 atomic check outcomes
| Principle / check | Status | Confidence | Evidence or reason |
|---|---|---|---|
respect-user-preferencesrespects-color-scheme | issues | high | The dark-mode screenshot is byte-identical to the default capture and retains white form surfaces; rendered CSS contains no prefers-color-scheme rule. F01 medium: Dark preference leaves the portal light-only |
respect-user-preferencesrespects-reduced-motion | issues | high | DOM/CSS inspection found no prefers-reduced-motion handling on a page that uses Angular transition/loading effects. F02 low: Reduced-motion preference is not implemented |
respect-user-preferencesrespects-contrast | issues | high | The prefers-contrast capture is byte-identical to default and CSS contains no prefers-contrast or forced-colors handling. F03 low: High-contrast preferences receive no explicit adaptation |
implement-natural-interactionsview-transitions | issues | high | DOM/CSS inspection found no view-transition declarations in this multi-route Angular portal. F04 low: Route and tab changes use abrupt legacy swaps |
implement-natural-interactionsscroll-driven-animations | not-applicable | high | No scroll-linked animation or scrollytelling surface exists on the audited templates. |
implement-natural-interactionsphysical-gestures | not-applicable | high | No swipe, pull, carousel or gesture-driven control exists on the audited desktop/mobile templates. |
provide-guided-navigationscroll-state-aware-chrome | issues | high | Screenshots show a tall fixed header/navigation/footer frame and DOM/CSS contains no scroll-state query or progress affordance. F05 low: Large persistent chrome does not respond to scroll state |
provide-guided-navigationanchored-positioning | not-applicable | high | No tooltip/popover/menu requiring viewport-edge anchored positioning was opened or present on the audited task surfaces. |
provide-guided-navigationdirects-attention | pass | high | Breadcrumbs, selected navigation states and specific page headings consistently identify the current route across the four representative templates. |
maximize-content-reduce-noiseno-intrusive-interruptions | pass | high | Desktop/mobile first-load screenshots across four templates show no popup, consent wall or content-obscuring interstitial. |
maximize-content-reduce-noisesemantic-dismissible-primitives | not-applicable | high | No modal or transient overlay appears on load or in the exercised empty-submit flow. |
maximize-content-reduce-noisereduced-chrome | pass | high | Screenshots show task forms as the dominant central content with consistent shared navigation and no advertising. |
adapt-to-the-form-factorresponsive-no-horizontal-scroll | pass | high | All four 360 px layout captures report scrollWidth 360, clientWidth 360, viewport meta present and zero horizontal overflow. |
adapt-to-the-form-factorcomponent-level-responsiveness | issues | high | Rendered CSS uses global media queries but no container queries across reusable forms and navigation components. F06 low: Responsive behavior is viewport-only |
adapt-to-the-form-factorinput-modality-aware | issues | high | The focus probe found the visible Services anchor with outline none and many zero-size menu links in the focus sequence; the toggle button was also zero-size at desktop. F07 high: Keyboard focus can disappear and hidden controls remain tabbable |
support-core-task-successclear-purpose-and-primary-action | pass | high | Login, Track Application Status, Search HSN Code and Grievance screenshots each have a specific heading and a visually identifiable primary form/action. |
support-core-task-successprimary-flow-completion | pass | high | The audited public entry states expose predictable labelled controls and login recovery/register links; authenticated transaction completion was explicitly outside coverage without credentials. |
support-core-task-successclear-system-state-and-recovery | issues | high | After activating Login with both required fields empty, the captured form showed no visible error summary or field messages. F08 medium: Empty login submission gives no clear field-level recovery |
be-fast-and-stablegood-core-web-vitals | issues | high | Mobile Lighthouse measured LCP 8.5 s, TBT 770 ms and CLS 0.146; the first-party trace corroborated LCP 2.50 s and TBT 305 ms on the local run. F09 high: Load performance misses the Core Web Vitals bar |
be-fast-and-stablevisual-stability | issues | high | Layout observers measured CLS 0.151 on login, 0.143 on status, 0.303 on grievance and 0.990 on HSN search; Lighthouse identified form/footer shifts and unsized icons. F10 high: Templates shift substantially during load |
be-fast-and-stableefficient-main-thread | issues | high | Trace recorded a 355 ms long task and 305 ms TBT; Lighthouse measured 2.6 s main-thread work with 1.79 s script evaluation. F11 high: Legacy script work blocks the main thread |
be-fast-and-stableefficient-resource-delivery | issues | high | HAR recorded two redirects and parser-inserted high-priority scripts; Lighthouse estimates 1.51 s redirect savings, including an HTTP hop. F12 medium: Redirects and parser-blocking resources delay content |
be-fast-and-stabletrim-unused-and-duplicate-code | issues | high | Lighthouse estimates 235 KiB unused JavaScript, including 77% of a 220 KiB bundle, plus 22 KiB unused CSS and 22 KiB minification savings. F13 high: Most of large shared bundles are unused on login |
be-inclusivenames-roles-labels | issues | high | Lighthouse and the images probe found four social images without alt text; their links therefore lack robust accessible names. F14 medium: Footer icons lack accessible alternatives |
be-inclusivesufficient-contrast | pass | high | Lighthouse accessibility score was 0.89 and reported no automated color-contrast failure; preference screenshots keep text and controls visible. |
be-inclusivestructure-and-focus | issues | high | Lighthouse found no main landmark and a heading-order failure (Login begins at h4); the focus probe also found hidden and outline-less controls. F15 high: Landmark and heading structure is incomplete |
be-inclusivelegible-text | pass | high | Desktop/mobile screenshots show unclipped body copy and labels at readable sizes with no horizontal overflow. |
be-inclusivezoom-reflow-targets-and-media | issues | high | The focus probe measured visible login/register controls at only 34 px high and found a zero-size navigation toggle and many zero-size focusable menu links. F16 medium: Several interactive targets are too small or zero-sized |
follow-best-practicesno-console-errors | issues | high | Lighthouse captured Angular $compile:nodomevents from angular-all1.0.js during the login load. F17 medium: Angular throws a console error during load |
follow-best-practicessound-document-and-assets | issues | high | All five images lack explicit width and height; Lighthouse ties the social icons to observed layout shifts. F18 medium: Images omit intrinsic dimensions |
follow-best-practicesbrowser-platform-hygiene | issues | high | The password input has autocomplete="off" and data-ng-paste="$event.preventDefault()"; Lighthouse flags paste prevention, and three large scripts reference missing source maps. F19 high: Password managers are deliberately obstructed |
be-discoverabletitle-and-description | pass | high | DOM records a descriptive title “Goods & Services Tax (GST) | Login” and meta description “Login to GST Portal”. |
be-discoverablecrawlable-and-mobile-friendly | issues | high | Lighthouse found JavaScript/# anchors and the link text “here”; DOM extraction also found the Skip to Main Content link implemented as javascript:void(0). F20 medium: Some navigation is not crawlable or descriptive |
be-discoverablecanonical-and-indexing-signals | issues | high | The rendered login document exposes no canonical link; requests for robots.txt/sitemap.xml returned the application shell rather than machine-readable control files. F21 medium: Canonical and sitemap signals are missing or inconsistent |
be-discoverablestructured-and-shareable-metadata | not-applicable | high | The audited routes are utility forms rather than article/product/event/entity detail pages requiring rich structured/share metadata. |
be-private-and-securesecure-transport-and-headers | issues | high | Lighthouse observed an HTTP redirect hop; the cookie audit found Lang without Secure and both cookies set SameSite=None. F22 high: An insecure redirect and cookie weaken an HTTPS login |
be-private-and-securedata-minimisation-and-third-parties | pass | high | Tracker scan found no known trackers; all observed origins are GST government subdomains and secrets scan found no exposed credentials. |
be-private-and-securein-context-permissions-and-modern-auth | issues | high | The login surface exposes only username/password, disables autocomplete and blocks password paste; no WebAuthn/passkey affordance was observed. F23 high: Authentication is password-only and blocks secure assistance |
be-private-and-securedefensive-browser-policies | issues | high | Headers include unsafe-inline and unsafe-eval in script-src; Referrer-Policy and Permissions-Policy are missing. F24 high: CSP is permissive and privacy headers are absent |
be-resilientprogressive-enhancement | issues | high | Discoverability measured only 3% raw/rendered content overlap and classified the page as a JS shell; the crawler view only says JavaScript is required. F25 high: Core content disappears without JavaScript |
be-resilientresilient-runtime-behaviour | pass | high | Four public templates rendered complete forms without cut-off overlays or failed async shells at desktop and mobile widths. |
be-resilientoffline-and-installable | not-applicable | high | Tax filing, identity and live status services are intrinsically online; offline transaction completion is not appropriate, though progressive enhancement remains applicable. |
be-resilientnetwork-and-http-failure-states | pass | high | A deliberately invalid route renders a clear Page not found panel with guidance to return Home or choose another menu page. |
be-internationalisedlang-dir-and-logical-properties | issues | high | The rendered documents declare lang="en" but the audited login and public-service templates expose no language selector or alternate-language links; CSS contains many physical left/right offsets. F26 medium: A nationwide public service is exposed as English-only on audited routes |
be-internationalisedlocale-aware-data | not-applicable | high | The audited public forms did not display dates, currencies, locale-formatted numbers or durations. |
be-internationalisedtime-zone-correctness | not-applicable | high | The audited routes did not expose events, schedules, timestamps or recurring time concepts. |
be-trustworthyno-dark-patterns | pass | high | Audited login, lookup, search and grievance screenshots show no ads, confirmshaming, forced continuity or preselected commercial consent. |
be-trustworthyhumane-error-handling | issues | high | Empty login submission produced no visible field-level message or error summary despite required fields. F27 high: Required-field errors are not surfaced humanely |
be-trustworthytrustworthy-input-assistance | issues | high | DOM/Lighthouse show autocomplete="off" on login fields and active paste prevention on the password field. F28 high: Login disables autofill and paste |
be-trustworthysafe-commercial-and-account-flows | issues | high | The account entry point provides password-only authentication while blocking paste/autofill, with no observed passkey option. F29 high: Account access relies on a hostile password flow |
be-sustainableoptimised-assets | pass | high | Image probe found five SVG assets, no oversized raster images and no legacy image formats. |
be-sustainableno-wasteful-work | issues | high | Lighthouse estimates 235 KiB unused JavaScript and 22 KiB unused CSS while HAR attributes 454 KiB transferred to scripts. F30 medium: The login route ships substantial unused code |
be-sustainablethird-party-and-media-budget | pass | high | HAR contains no video/audio and only GST-operated subdomains; total transfer is 639 kB, although script waste is separately reported. |
be-agent-readystructured-agent-capabilities | not-applicable | high | This emerging capability was judged out of scope because the portal declares no agent-facing intent and exposes sensitive government transactions. |
be-agent-readyon-device-inference | not-applicable | high | No summarisation or language-model task is necessary on the audited utility forms; absence is not a failure. |
be-memory-efficientno-leak-under-repeated-interaction | pass | medium | After ten repeated empty-login submissions, heap self size rose 296,355 bytes (2.3%) and constructors remained broadly stable, consistent with bounded one-time compilation rather than clear unbounded growth. |
be-memory-efficientbounded-footprint | pass | medium | Baseline heap summary is 12.6 MB self size and 224,169 nodes for the shared Angular portal shell, a proportionate current footprint. |
be-memory-efficientno-detached-dom-or-unbounded-listeners | pass | medium | Baseline/post summaries show no Detached* constructor among dominant populations and only small changes after ten submissions; no accumulating detached-DOM signal was observed. |
Provenance
Canonical report: results/atomic/reports/0574-services_gst_gov_in.json
Report SHA-256: cbe8101b7d58a4c6564f22a921b4c94eeb22bcdb9884a769769d5e14d28aa555
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/services_gst_gov_in/2026-07-21T16-22-39-724Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/services_gst_gov_in/2026-07-21T16-22-39-724Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7
Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.