Manifest position 647 · CrUX rank bucket 1000
https://www.dafont.com
Coverage complete
Atomic audit completed across 58 checks. Findings: {"critical":5,"high":16,"medium":11,"low":3}.
Attempts
1 / 3
Judged checks
58 / 58
Blocked
0
Not run
0
This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.
All 58 atomic check outcomes
| Principle / check | Status | Confidence | Evidence or reason |
|---|---|---|---|
respect-user-preferencesrespects-color-scheme | issues | high | The dark-media probe matched prefers-color-scheme: dark but computed body background remained rgb(255,255,255), text rgb(0,0,0), and color-scheme was normal. The dark screenshot is visually unchanged. F01 medium: The first-party interface stays light when the user requests dark mode. |
respect-user-preferencesrespects-reduced-motion | pass | high | No page animations were returned by document.getAnimations(), so there is no non-essential motion to suppress. |
respect-user-preferencesrespects-contrast | pass | high | Under prefers-contrast: more, core text/controls remained black on white and visible; standard contrast defects are recorded separately. |
implement-natural-interactionsview-transitions | issues | high | The platform probe found no view-transition CSS, and representative navigation uses classic MPA links with no cross-document transition rule. F02 low: Full-page navigation swaps are abrupt and do not use View Transitions. |
implement-natural-interactionsscroll-driven-animations | pass | high | No scroll-linked effects, animation timelines, inline scroll handlers or main-thread scroll anti-patterns were present. |
implement-natural-interactionsphysical-gestures | pass | high | The site uses native links/forms and no custom pointer/touchmove handlers that fight platform gestures. |
provide-guided-navigationscroll-state-aware-chrome | issues | medium | The platform probe found no scroll-state/container-query support; the 2,178px mobile layout and long FAQ screenshot show static chrome and no progress or compact sticky navigation. F03 low: Long listing and FAQ pages provide no scroll-state-aware orientation aid. |
provide-guided-navigationanchored-positioning | pass | high | No tooltip/menu/popover requiring attachment to an anchor was present; the problematic consent modal is viewport-modal and covered separately. |
provide-guided-navigationdirects-attention | pass | high | Theme breadcrumb text and explicit font/detail/download labels preserve orientation across classic page navigation. |
maximize-content-reduce-noiseno-intrusive-interruptions | issues | high | Desktop, mobile, dark and FAQ screenshots show a viewport-dimming modal before any interaction; it demands a choice about 272 partners before the font catalog can be used. F04 critical: A consent interstitial blocks all content on first load. |
maximize-content-reduce-noisesemantic-dismissible-primitives | issues | high | axe found an untitled iframe; the DOM/platform probe found zero dialog, popover or details elements, while screenshots show a modal surface. In one detail capture its iframe content rendered blank while still blocking the page. F05 high: The blocking consent UI is third-party custom iframe chrome rather than a robust semantic dialog. |
maximize-content-reduce-noisereduced-chrome | pass | high | The underlying catalog uses a compact header and content-dense font list; excessive interruption is isolated in separate consent findings. |
adapt-to-the-form-factorresponsive-no-horizontal-scroll | issues | high | At a requested 360x800 viewport, layout metrics reported no viewport meta and an effective 980px layout/visual viewport at scale 0.367; the screenshot shows tiny desktop content rather than reflow. F06 critical: Mobile browsers receive a scaled-down 980px desktop layout. |
adapt-to-the-form-factorcomponent-level-responsiveness | issues | high | The platform probe found no container queries, while French CSS evidence includes legacy 965px padding/margin compensation and floated physical columns. F07 medium: Reused catalog components are fixed to the page shell rather than adapting to available space. |
adapt-to-the-form-factorinput-modality-aware | issues | high | Login probe measured text fields and buttons at 21px high and the remember checkbox at 13x13px; the scaled mobile page makes them smaller still. Keyboard focus remained visible, but touch sizing is inadequate. F08 high: Many controls are too small for touch. |
support-core-task-successclear-purpose-and-primary-action | pass | high | Title/description identify a downloadable font archive; font rows expose explicit Download actions and detail has a 101x32 Download link. |
support-core-task-successprimary-flow-completion | issues | high | First-load screenshots on home, listing, detail and FAQ archetypes show the 272-partner consent wall covering the primary catalog and download controls. F09 critical: The core browse-to-download journey is interrupted before it can start. |
support-core-task-successclear-system-state-and-recovery | pass | high | A representative missing URL showed an explicit 404 message and links back to each language home. |
be-fast-and-stablegood-core-web-vitals | issues | high | Lighthouse measured LCP 7.0s, Speed Index 4.0s and time-to-interactive 7.0s, producing a performance score of 0.68; the controlled desktop trace was faster at 1.06s LCP. F10 high: Mobile loading misses the good LCP range. |
be-fast-and-stablevisual-stability | pass | high | Layout observer measured CLS 0.004 and Lighthouse measured CLS 0, both within the good range. |
be-fast-and-stableefficient-main-thread | pass | high | Trace found zero long tasks and 0ms TBT; Lighthouse reported only 70ms TBT. |
be-fast-and-stableefficient-resource-delivery | issues | high | HAR summary lists many first-party images/CSS without useful cache headers and confirms parser-blocking classic scripts df5.js, key.js, alpha.js and themesv9_en.js without async/defer/module. F11 medium: Caching and critical delivery are inefficient. |
be-fast-and-stabletrim-unused-and-duplicate-code | issues | high | The HAR transferred 845,527 bytes; 771,937 bytes (91%) were third-party, including a 355,942-byte CMP, 257,136 bytes of ad scripts and 154,650 bytes from Tag Manager. F12 high: Third-party script code dominates a simple catalog page. |
be-inclusivenames-roles-labels | issues | high | axe found 19 missing image alternatives, an unlabeled search input, eight unnamed links and an untitled iframe on home; listing/detail add unnamed selects, and login username/password are unlabeled. F13 critical: Core controls and images lack accessible names and labels. |
be-inclusivesufficient-contrast | issues | high | Lighthouse reports 3.54:1 for 11px #888 text on white; axe found 3 home consent failures and 9 listing failures. F14 high: Small metadata and consent text fail WCAG contrast. |
be-inclusivestructure-and-focus | issues | high | Home has no headings; login only has H3 Login. axe reports no main landmark, dozens of regions outside landmarks, unnamed links and tabindex=1 on search. F15 high: Pages lack a logical heading and landmark structure. |
be-inclusivelegible-text | issues | high | The 360px screenshot scales a 980px canvas to 0.367, reducing already-small 11px metadata and dense menus to illegible sizes. F16 high: The mobile presentation is too small and cramped to read comfortably. |
be-inclusivezoom-reflow-targets-and-media | issues | high | No viewport meta was present; the 360px test stayed 980px wide at page scale 0.367, while login controls measured 13-21px high. F17 critical: The page does not reflow at a narrow viewport and exposes undersized controls. |
follow-best-practicesno-console-errors | pass | high | Lighthouse errors-in-console audit passed with no items. |
follow-best-practicessound-document-and-assets | issues | high | The page declares HTML 4 Transitional and ISO-8859-1/Windows-1252; Lighthouse failed its doctype audit. Images primitive found 19 legacy PNG/GIF images, 2 missing dimensions and 7 below-fold images without lazy loading. F18 medium: The document and image stack use legacy or incomplete asset practices. |
follow-best-practicesbrowser-platform-hygiene | issues | high | Lighthouse reports two BFCache blockers: Cache-Control: no-store on the main resource and on a JavaScript network response. F19 medium: The page is excluded from back/forward cache. |
be-discoverabletitle-and-description | pass | high | Homepage and font detail retain descriptive title/meta text in raw HTML; Lighthouse title and meta-description audits passed. |
be-discoverablecrawlable-and-mobile-friendly | issues | high | Lighthouse and DOM evidence confirm real href links and crawlability, but the page has no viewport meta and renders a 980px desktop canvas at mobile scale. F20 high: The public catalog is crawlable but not mobile-friendly. |
be-discoverablecanonical-and-indexing-signals | issues | high | The homepage has a canonical URL and robots permits principal pages, but /sitemap.xml returns a styled 404 despite many catalog detail URLs. F21 low: There is no sitemap for the large public font archive. |
be-discoverablestructured-and-shareable-metadata | issues | high | The login/general probe found zero JSON-LD and Open Graph tags; detail discoverability confirms a public font entity with title/H1/description that could be represented explicitly. F22 medium: Font detail pages expose no structured entity or social preview metadata. |
be-private-and-securesecure-transport-and-headers | issues | high | Headers primitive found no CSP, HSTS, X-Content-Type-Options, clickjacking, Referrer-Policy or Permissions-Policy. redirector-rootdir is not Secure and both observed cookies use SameSite=None. F23 high: HTTPS is used, but baseline security headers and cookie attributes are incomplete. |
be-private-and-securedata-minimisation-and-third-parties | issues | high | Trackers found seven third-party origins and Google Ads, Tag Manager and Analytics; HAR shows third parties account for 91% of transferred bytes while the modal describes sharing with 272 partners. F24 high: The page loads a large tracking and advertising surface before a positive choice. |
be-private-and-securein-context-permissions-and-modern-auth | issues | high | No permission prompt was detected on load, but login exposes only username/password, with no autocomplete tokens and no visible passkey/WebAuthn option. F25 medium: Authentication is password-only and lacks modern sign-in assistance. |
be-private-and-securedefensive-browser-policies | issues | high | Headers evidence found no HSTS, clickjacking protection, CSP/frame-ancestors, Referrer-Policy or Permissions-Policy. F26 high: Browser-enforced defenses are absent. |
be-resilientprogressive-enhancement | pass | high | Homepage/detail are server-rendered, not JS shells; raw HTML returned 200 and retained title/description/core content (49%/55% token coverage). |
be-resilientresilient-runtime-behaviour | issues | high | The detail-page capture shows an empty white consent panel over dimmed content; because the overlay is third-party and modal, its partial failure prevents access to the download flow. F27 high: Failure of the consent iframe can leave a blank modal blocking the page. |
be-resilientoffline-and-installable | not-applicable | high | DaFont is a document-oriented public MPA archive, not an installed app; offline installability is not required for its core download catalog. |
be-resilientnetwork-and-http-failure-states | pass | high | A failed route gives a concise 404 state with recovery links instead of a blank shell. |
be-internationalisedlang-dir-and-logical-properties | issues | high | French probe reported lang=fr, but no dir and numerous fixed left/right floats, offsets, padding and text alignment rules, including the 965px shell. F28 medium: Localized pages set language correctly but use direction-fragile physical CSS. |
be-internationalisedlocale-aware-data | pass | high | French route sets lang=fr, translates labels and formats counts with French spacing conventions (e.g. 21 448). |
be-internationalisedtime-zone-correctness | not-applicable | high | Representative pages show no schedules, event times or timezone-sensitive data to format. |
be-trustworthyno-dark-patterns | issues | high | The blocking dialog foregrounds a red Accept all button while Do not accept is a small underlined text link; it describes sharing extensive data with 272 partners and forces a decision before use. F29 high: Consent choices are visually and cognitively asymmetric. |
be-trustworthyhumane-error-handling | issues | high | After activating Login with empty fields, the screenshot returned to the same form with no visible field-level or summary error; controls lack required/ARIA validation semantics. F30 high: Blank login submission gives no actionable error feedback. |
be-trustworthytrustworthy-input-assistance | issues | high | Login probe shows empty autocomplete values for username and password, preventing reliable password-manager/autofill assistance. F31 medium: Sign-in fields omit autocomplete metadata. |
be-trustworthysafe-commercial-and-account-flows | issues | high | The login archetype offers username/password and remember-me but no passkey option or explicit modern reauthentication path. F32 medium: The account flow depends on password-only authentication. |
be-sustainableoptimised-assets | issues | high | Images primitive found 19/19 images in PNG/GIF, no modern formats, seven below-fold images without lazy loading, two missing dimensions and one missing responsive source. F33 medium: Image delivery uses legacy formats and misses basic deferral metadata. |
be-sustainableno-wasteful-work | issues | high | Only 73,590 transferred bytes were first-party, versus 771,937 third-party bytes for consent, ads and analytics; these scripts load during the initial view. F34 high: Optional third-party work dominates a lightweight first-party page. |
be-sustainablethird-party-and-media-budget | issues | high | Eight third-party requests deliver 91% of page bytes; the three largest vendor scripts are 355,942, 190,639 and 154,650 bytes. F35 high: The third-party budget is disproportionate to the font-browsing task. |
be-agent-readystructured-agent-capabilities | not-applicable | high | No declared agent-facing intent exists; this public font archive exposes ordinary crawlable pages and downloads, so emerging WebMCP tools are an opportunity rather than a requirement. |
be-agent-readyon-device-inference | not-applicable | high | No summarisation, generation or other inference task is part of the representative font-browsing journey. |
be-memory-efficientno-leak-under-repeated-interaction | not-applicable | high | This is a navigation-based MPA with no long-lived modal/route/feed interaction to repeat meaningfully; a synthetic loop would not represent user behaviour. |
be-memory-efficientbounded-footprint | pass | high | Single-state heap was 13.53MB self-size with 223,531 heap nodes and ~12.9MB used JS heap, proportionate to the page plus consent/ad code. |
be-memory-efficientno-detached-dom-or-unbounded-listeners | pass | high | Single-state heap top constructors contained no Detached* population, and the page had no inline scroll/pointer listener accumulation signal. |
Provenance
Canonical report: results/atomic/reports/0647-www_dafont_com.json
Report SHA-256: 1cb54891870780e943c882e6db99202a4d03fc71aa0b62570e8112f6bb7ed207
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_dafont_com/2026-07-22T03-28-34-984Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_dafont_com/2026-07-22T03-28-34-984Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7
Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.