WQI.web​qualityindex
Method v1.1.0 85 live / 86 total factors methodology

/ / d / github.com

github.com

61 / 100
overall · band: medium
scanned2026-04-26 23:21:22Z
methodv0.1 — 2026-04-25
verdicts35 pass 5 warn 34 fail 12 n/a
rescan
writes a fresh score to the registry

Categories

Security63/ 100 · 9 measured
Performance49/ 100 · 9 measured
SEO44/ 100 · 8 measured
AI-readiness50/ 100 · 4 measured
Privacy10/ 100 · 6 measured
Accessibility83/ 100 · 6 measured
Brand presence40/ 100 · 16 measured
Email health70/ 100 · 16 measured

Site facts

Snapshot date
2026-04-26
Factors scored
74 / 86
Composite score
61/100
Method version
v0.1 — 2026-04-25

Security· 63/100

#FactorVerdictScoreEvidence
4Security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-Content-Type-Options)pass90security_headers_score=90, missing=Permissions-Policy
5SSL certificate validity & expiration windown/a—Scoring not yet implemented
6WordPress REST API user enumeration exposurepass100not_wordpress
7Sensitive path exposure (.git, .env, /admin, xmlrpc.php, wp-login.php)warn75findings={"path":"/wp-admin","status":200}, total_checked=6
22DNSSEC validationfail0ds_present=false, ad_bit=false
23CAA recordsfail0records=\# 19 00 05 69 73 73 75 65 64 69 67 69 63 65 72 74 2e 63 6f 6d|\# 21 00 05 69 73 73 75 65 67 6c 6f 62 61 6c 73 69 67 6e 2e 63 6f 6d|\# 22 00 05 69 73 73 75 65 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67|\# 18 00 05 69 73 73 75 65 73 65 63 7…
26HSTS preload list inclusionpass100hsts_header=max-age=31536000; includeSubdomains; preload, preload_status=preloaded
27TLS minimum version & cipher suite qualitypass100status=READY, worst=A+
28Subdomain takeover surfacepass100findings={"subdomain":"www.github.com","cname":"github.com.","dangling":false}|{"subdomain":"blog.github.com","cname":"github.github.io.","dangling":false}|{"subdomain":"shop.github.com","cname":"github.com.","dangling":false}, dangling_count=0
29Spam / phishing blocklist presencefail0listed=true, response_code=0, answers=127.255.255.254

Performance· 49/100

#FactorVerdictScoreEvidence
8Mobile PageSpeed score + Core Web Vitals (LCP, FCP, CLS)fail49performance_score=38, lcp_ms=7916.857689363176, cls=0, components={"perf":38,"lcp":30,"cls":100}
9HTTP/2 supportn/a—Scoring not yet implemented
10Compression (Brotli / gzip)pass80perf_compression=gzip
30HTTP/3 supportfail0supports_h3=false
31IPv6 supportfail0aaaa_count=0
32Image optimization (WebP/AVIF)warn70id=image-delivery-insight, lighthouse_score=0.5, displayValue=Est savings of 559 KiB
33Desktop PageSpeed scoren/a—Scoring not yet implemented
34Core Web Vitals from CrUX (Real User Monitoring)n/a—Scoring not yet implemented
35Lazy loading on below-fold imagesfail40id=image-delivery-insight, lighthouse_score=0.5, displayValue=Est savings of 559 KiB
36Font loading strategy (FOUT/FOIT/swap)pass100id=font-display-insight, lighthouse_score=1
37Total homepage byte weightpass100html_bytes=512000, subresource_bytes=0, total_bytes=512000, total_kb=500, sampled=0, total_refs=0
38Largest unused JavaScript bundlefail0deferred_scripts=64, sample=https://github.githubassets.com/assets/wp-runtime-f2375f2858a8f670.js|https://github.githubassets.com/assets/fetch-utilities-3140609b5732710f.js|https://github.githubassets.com/assets/28839-7adfdde5afeb1a03.js|https://git…

SEO· 44/100

#FactorVerdictScoreEvidence
11Title, meta description, OG, Twitter cards, canonicalpass100title=true, description=true, og=true, twitter=true, canonical=true
12Schema.org structured data presencefail0structured_data_absent
13H1 tag presencefail0h1_count=0
14Sitemap.xml + robots.txt presencewarn50has_robots_txt=true, has_sitemap=false
39Schema.org type validity (parsed JSON-LD)n/a—Scoring not yet implemented
40Breadcrumb schemafail0present=false
41FAQ / HowTo schema (where applicable)n/a—n/a — not_applicable
42hreflang for multi-language sitespass100html_lang=en, languages_seen=en, alternates=6, alternate_langs=en|pt|es|ja|ko|x
43Internal link depth (clicks from homepage to deepest content)pass100max_depth=1, pages_fetched=50, pages_seen=238, capped_at=50
61Better Business Bureau accreditationfail0no_link_on_site

AI-readiness· 50/100

#FactorVerdictScoreEvidence
15llms.txt presencepass100has_llms_txt=true, size_bytes=27100
16AI crawler robots.txt directivespass100robots_ai_blocked_count=0
44AI plugin manifest (.well-known/ai-plugin.json)fail0status=404
45JSON-LD richness score for LLMsfail0org_complete=false, has_address=false, has_contact_point=false, has_same_as=false, has_content_type=false, breakdown={"coreOrg":0,"contact":0,"sameAs":0,"contentType":0}

Privacy· 10/100

#FactorVerdictScoreEvidence
46Cookie banner presence + CMP detectionfail0banner_detected=false
47Privacy policy page presencefail0found=false
48Terms of service page presencefail0found=false
49Third-party tracker countwarn60count=5, hosts=avatars.githubusercontent.com|github-cloud.s3.amazonaws.com|github.githubassets.com|images.ctfassets.net|user-images.githubusercontent.com
50CCPA "Do Not Sell or Share My Personal Information" linkfail0found=false
51Cookie scan — actual cookies set on first loadfail0count=3, names=_gh_sess|_octo|logged_in, with_cmp=false

Accessibility· 83/100

#FactorVerdictScoreEvidence
52Accessibility statement pagefail0found=false
53axe-core / WAVE accessibility scanpass97accessibility_category=0.97
54Image alt text coveragepass100lighthouse_score=1, failing_count=0
55Heading hierarchy validitypass100lighthouse_score=1
56Color contrast (WCAG AA)pass100lighthouse_score=1, failing_count=0
57ARIA labels presence and validitypass100total_aria_audits=22, applicable=12, passing=12
58Skip-to-content linkn/a—Scoring not yet implemented

Brand presence· 40/100

#FactorVerdictScoreEvidence
17Domain age (RDAP / WHOIS)pass100domain_age_years=18.5
18Wayback Machine site age & last snapshotn/a—Scoring not yet implemented
19Google Business Profile presence + ratingpass100found=true, rating=4.5, review_count=284
20News mentions in last 30 dayspass85news_mentions_count=20
21Wikipedia entitypass100found=true, title=GitHub, url=https://en.wikipedia.org/wiki/GitHub
59Yelp presence + rating + review countfail0no_link_on_site
60Trustpilot presence + ratingfail0no_link_on_site
62LinkedIn Company Page (presence + employee count + follower count)fail0no_link_on_site
63Bing Placesn/a—n/a — no_public_url_convention
64Apple Maps presence (Apple Business Connect)fail0no_link_on_site
65Facebook Page presencefail0no_link_on_site
66Instagram presence (link from site → IG profile)fail0no_link_on_site
67Web App Manifest (manifest.json)n/a—Scoring not yet implemented
68Service Worker / PWA capabilityn/a—Scoring not yet implemented
69Analytics tools detectedfail0count=0
70Payment processors detectedn/a—n/a — no_payment_detected
71Marketing automation tools detectedfail0count=0
72Customer support tools detectedfail0count=0
73Tag manager presencewarn50count=0
74Ad networks detectedpass100count=0
83Visible contact form on sitepass100detected=true, count=2

Email health· 70/100

#FactorVerdictScoreEvidence
1DMARC enforcementpass80present=true, policy=quarantine
2DKIM signingpass100present=true, selector=google, source=doh_probe
3SPF record present and validpass100present=true, raw="v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:…
24MTA-STS & TLS-RPTfail0policy_ok=false
25BIMI + VMCfail0no_bimi
75Branded domain email address (vs free Gmail/Yahoo)pass100branded=true, provider=microsoft
76Email provider class (Workspace / 365 / Zoho / self-hosted / shared)pass100provider=microsoft_365, mx=github-com.mail.protection.outlook.com, source=mx_classifier
77DMARC aggregate reporting enabled (rua=)pass100has_dmarc_reporting=true, audit_flag=true, derived_from_raw=true, source=derived_from_raw, dmarc_raw="v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:dmarc@github.com; ruf=mailto:dmarc@github.com; fo=1"
78Free-email exposure on contact page (gmail/yahoo/outlook visible)pass100Scored
79Newsletter signup form detectedfail0detected=false
80Email Service Provider (ESP) detectedpass100providers=Mailchimp
81Transactional email provider detected (from SPF includes)pass100providers=Zendesk|Salesforce|SendGrid
82SPF lookup count (10-limit deliverability check)fail40lookups=10, limit=10
84Mailto: direct contact link presentfail0Scored
85Email forwarding service detected (improvmx, forwardemail, etc.)pass100hosts=github-com.mail.protection.outlook.com, provider=Microsoft 365, kind=branded
86Lead magnet / signup incentive detected (free download, ebook, etc.)pass100detected=true, sample=free trial

Scores are computed under method v0.1 — 2026-04-25. See the methodology for the full factor list and per-factor specifications.