out of 100

Solid, with real money left on the table.
0 critical · 2 high · 1 medium · 3 low | 38 checks, 25 links tested
Server responded in 74 ms · 51 KB of HTML · cloudflare

What is wrong, worst first

high 1 broken link out of 25 checked

Dead links waste visitors and leak search authority: https://bsky.app/profile/nodejs.org (HTTP 404)

Fix: Fix or remove the links listed above.

high No visible way to contact you

The homepage has no email link, phone link or form. Interested visitors leave.

Fix: Put an email link or a short contact form above the fold.

medium 18 external scripts on one page

Each one is a separate download that can block rendering; third-party tags are the usual cause.

Fix: Audit tag manager and plugins, remove what nobody reads, defer the rest.

low 2 security headers missing: Content-Security-Policy, Referrer-Policy

Content-Security-Policy - Any injected script can run freely on your pages. Referrer-Policy - Full URLs of your pages leak to every third-party site you link to.

Fix: Start with a report-only policy, then enforce it. Send: Referrer-Policy: strict-origin-when-cross-origin

low Server software version is advertised (Next.js)

Attackers scan for exact versions with known exploits.

Fix: Hide the banner: server_tokens off (nginx) or expose_php=Off / ServerTokens Prod.

low No structured data (schema.org)

You are not eligible for rich search results: star ratings, business hours, FAQ dropdowns.

Fix: Add a JSON-LD block describing your Organization, LocalBusiness or Product.

Already correct

http traffic is redirected to https
page title present and well-sized
meta description present
mobile viewport tag present
canonical URL declared
social sharing preview tags present
single clear H1 heading
compression enabled (br)
fast server response (74 ms)
sitemap.xml found

I will write the fixes for you — $29

This page found the problems. The Fix Pack hands you the solution: the exact meta tags for your pages, the redirect and security-header block written for your actual server (cloudflare), alt text drafted for your images, the broken links mapped to their replacements, and a short ordered checklist of what to do first. One file, copy and paste, plain-English notes throughout. Back to you within 24 hours, or full refund.

Get the Fix Pack for nodejs.org/en

Permanent link to this report

Share it with whoever maintains the site — no login needed, and it re-checks nothing until you ask.

https://tinkeraudit.com/r/nodejs.org-591dc52

← Audit another site · Recent audits