perf(docs): core web vitals — self-host fonts, drop dead assets, defer pixel, add security headers - #896
perf(docs): core web vitals — self-host fonts, drop dead assets, defer pixel, add security headers#896dhananjay6561 wants to merge 14 commits into
Conversation
There was a problem hiding this comment.
Pull request overview
This PR improves the docs site’s Core Web Vitals (notably LCP) and security posture by removing render-blocking third-party resources, self-hosting fonts, deferring non-critical analytics, and tightening response headers. It also includes small accessibility fixes for decorative SVGs.
Changes:
- Self-host DM Sans (woff2 variable font subsets) and remove Google Fonts preconnect/stylesheet from
headTags. - Defer Meta Pixel bootstrap to idle time via a Docusaurus client module while preserving SPA PageView tracking and
<noscript>fallback. - Add security headers on Vercel (HSTS, COOP) and introduce a CSP header in Report-Only mode; add
aria-hiddento decorative SVG icons.
Reviewed changes
Copilot reviewed 9 out of 17 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
| vercel.json | Adds HSTS, COOP, and CSP Report-Only header configuration. |
| src/metaPixelRouteTracker.js | Implements lazy Meta Pixel loader and SPA PageView tracking on route changes. |
| src/css/custom.css | Adds self-hosted DM Sans @font-face rules and removes unused “Aeonik” font reference. |
| src/components/WhatIsKeploy.js | Marks decorative SVGs as aria-hidden and applies formatting tweaks. |
| src/components/UtgMethods.js | Adds aria-hidden="true" to decorative SVG icons. |
| src/components/Resources.js | Adds aria-hidden="true" to decorative SVG icons. |
| src/components/Product.js | Adds aria-hidden="true" to decorative SVG icons. |
| src/components/Intro.js | Adds aria-hidden="true" to decorative SVG icons. |
| docusaurus.config.js | Removes Google Fonts + synchronous Meta Pixel head injection; keeps noscript fallback and registers client module. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
…, defer pixel, security headers - D1/D6: self-host DM Sans as a variable woff2 (latin + latin-ext), mirroring the existing Roboto @font-face setup; remove the render-blocking Google Fonts stylesheet and its two preconnects from headTags (preconnects 6 -> 4) - D2: delete 6 confirmed 0-ref heavy assets (2x unit-test.gif, record-testcase, interoperability, tc-generation gifs + reactor.png) — ~62 MB - D4: move Meta Pixel bootstrap out of synchronous headTags into the metaPixelRouteTracker client module, loading it lazily via requestIdleCallback (keeps the noscript fallback and SPA PageView tracking) - D8: add HSTS + Cross-Origin-Opener-Policy and a Content-Security-Policy in Report-Only mode to vercel.json - D9: add aria-hidden to decorative footer + component SVG icons - D10: remove the undefined "Aeonik" font-family reference Signed-off-by: dhananjay6561 <dhananjayaggarwal6561@gmail.com>
…ont CI guards - D11: emit client source maps via a configureWebpack plugin (devtool: source-map for the client bundle only) — no new dependency, only extra .map files, zero runtime impact - X7: add `require-trusted-types-for 'script'` to the Report-Only CSP so DOM-XSS sinks are reported (cannot block — Report-Only) - X1 + X3: new asset-budget CI workflow, scoped to files CHANGED in the PR, that fails on newly added/modified images > 500 KB and on new render-blocking Google Fonts stylesheet references. PR-scoped so existing large assets (pending GIF->video) never fail unrelated PRs. Signed-off-by: dhananjay6561 <dhananjayaggarwal6561@gmail.com>
Addresses PR review: scheduleBootstrap() could queue multiple requestIdleCallback/setTimeout tasks on rapid SPA navigations before the first idle callback fires. Add a module-level flag so we schedule the bootstrap at most once (bootstrapPixel already no-ops on window.fbq). Signed-off-by: dhananjay6561 <dhananjayaggarwal6561@gmail.com>
The 4 GIFs that are actually embedded in docs (record-replay, replay-tc, how-keploy-works, record-api) were 7.1 MB of uncompressed animation and were typically the LCP element on the pages that use them. Convert each to H.264 MP4 (faststart, yuv420p) and swap all 30 live references (across v1/v2/v3/v4, 24 files) from GIF <img>/markdown to a looping muted autoplay <video>: static/gif/record-replay.gif 2.5M -> record-replay.mp4 276K static/gif/replay-tc.gif 2.1M -> replay-tc.mp4 408K static/gif/how-keploy-works.gif 1.4M -> how-keploy-works.mp4 140K static/img/record-api.gif 1.1M -> record-api.mp4 804K total 7.1M -> 1.6M Each <video> carries intrinsic width/height (aspect-ratio reserved -> no CLS), autoPlay/loop/muted/playsInline to mimic the GIF, and the old alt text as aria-label. Paths normalised to the baseUrl-correct /docs/... form. Commented- out references were left untouched. Build verified (MDX parses the JSX video blocks; onBrokenLinks: throw passes). Signed-off-by: dhananjay6561 <dhananjayaggarwal6561@gmail.com>
The D3 GIF-to-MP4 swap introduced <video> blocks that broke two checks. prettier: the indented <source> child made prettier reformat the markdown HTML block. The two versions disagree on how — 2.8.8 wants a blank line after the opening tag (which would split the JSX block), while 3.9.6 wants the child dedented to column 0. The workflow pins 2.8.8 but the action installs 3.9.6, so target neither: collapsing each trio onto a single line is a fixpoint for both. Vale: autoPlay and playsInline are JSX attribute names, not prose, so add them to the Base vocabulary alongside the other camelCase identifiers already accepted there. Signed-off-by: dhananjay6561 <dhananjayaggarwal6561@gmail.com>
0b67f46 to
6b3b894
Compare
Docusaurus's mdx-loader already resolves and sizes Markdown images
(`` renders with width/height + a hashed asset), but it
leaves hand-written HTML <img> tags in .md/.mdx untouched. Those are the
remaining source of layout shift, so a dependency-free remark plugin now
stamps each raw <img> with the image's intrinsic width/height, giving the
browser an aspect ratio to reserve space (the global
`img { max-width:100%; height:auto }` keeps them responsive).
No dependency (avoids syncing the repo's dual yarn.lock/package-lock.json):
the plugin reads PNG/GIF/JPEG headers itself. The parser is chosen by magic
bytes, not extension, so a mislabeled file (this repo has one PNG saved as
.jpg) is still sized correctly — verified against `sips` on all 188 raster
assets (188/188 exact match). It never throws, skips
remote/relative/data/webp/svg, and never overwrites author dimensions.
Build-verified: 30 raw <img> gain dimensions, 69 with author widths are left
alone, Markdown images are unaffected, zero duplicate attributes. No .md/.mdx
source files change — sizing happens at build time.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: dhananjay6561 <dhananjayaggarwal6561@gmail.com>
dhananjay6561
left a comment
dhananjay6561
left a comment
There was a problem hiding this comment.
Code review — perf/web-vitals-docs
Reviewed following the four-phase process (context → high-level → line-by-line → summary). This is a well-scoped, well-documented PR: the ticket table maps every change to a rationale, the remark plugin is genuinely careful (magic-byte parsing, never-throws, path-traversal guard, author-dimension preservation), and the risky bits (CSP, source maps) are correctly landed in non-enforcing / no-runtime-impact modes. Build + CI are green and the description is honest about what's deferred and why.
No blocking issues. I left a handful of inline notes — one 🟡 (a real but narrow analytics gap in the pixel loader whose code comment overstates what happens), plus a few 🟢/💡 hardening nits on the plugin cache and the CI guard. None need to block merge; the pixel one is worth a quick look.
🎉 The remarkImageSize plugin is the standout — choosing the parser by magic bytes rather than extension (and verifying 188/188 against sips) is exactly the right call for a repo with a mislabeled asset.
…ageView If the user navigates during the idle window before fbevents.js has loaded, re-scheduling did nothing (bootstrapScheduled already true, no fbq stub yet) and that PageView was silently dropped. Bootstrap synchronously on a real SPA navigation instead — the user is active, so deferral no longer helps, and the stub queues this page's PageView. A pending idle callback then no-ops.
…get filter checkout already uses fetch-depth: 0, so the extra shallow 'git fetch' was redundant and could truncate ancestry the three-dot merge-base needs. Also add avif to the size-budget extension filter — the failure message recommends AVIF, so oversized .avif files must be caught too.
dhananjay6561
left a comment
dhananjay6561
left a comment
There was a problem hiding this comment.
Re-review — all four notes resolved ✅
Re-reviewed the three follow-up commits (5e32dce, 256c6a6, 3f09246) against my earlier comments. Each is fixed correctly:
- 🟡 Dropped PageView (
5e32dce) — first real SPA navigation now callsbootstrapPixel()synchronously instead of re-scheduling into the not-yet-fired idle window. That creates thefbqstub and firesinit+ this page'sPageView(queued untilfbevents.jsloads), so the navigation is no longer lost, and any already-scheduled idle callback cleanly no-ops via thewindow.fbqguard. The corrected comment now matches the behavior. Resolved. - 🟢
sizeCache(256c6a6) — per-process caveat documented (build = fresh process/accurate; dev server = restart to pick up resized assets). Resolved. - 🟢 Redundant shallow fetch (
3f09246) — dropped, with a comment notingfetch-depth: 0already provides the ancestry the three-dot merge-base needs. Resolved. - 💡 AVIF budget gap (
3f09246) —avifadded to the image regex, so the guard now matches the format its own error message recommends. Resolved.
No new issues introduced. Nothing outstanding from my side — LGTM. 🎉
Two CWV follow-ups on the GIF->MP4 (D3) and font (D1) work: - Video posters: extract the first frame of each MP4 as a small JPEG and set it as the <video poster>. Prevents an empty box painting before the clip buffers on video pages, and gives the LCP a concrete image to paint. Added to all 30 <video> tags across v1/v2/v3/v4. - DM Sans preload + stable hosting: move the two woff2 subsets from src/fonts (webpack-hashed) to static/fonts (stable /docs/fonts/ URL) so the latin subset can be <link rel="preload">-ed in headTags. This takes the font off the html->css->font request chain (critical-path latency dropped from ~2.5s to ~0.2s in Lighthouse). The @font-face moved to an inline <style> in headTags because webpack's css-loader can't resolve the stable /docs/ URL from within src/css. Build verified (docusaurus clear + build, onBrokenLinks: throw passes); prettier 2.8.8 clean on all changed files. Signed-off-by: dhananjay6561 <dhananjayaggarwal6561@gmail.com>
GA (gtag), Meta Pixel, Microsoft Clarity, Hotjar and Apollo were loading during initial render (GA via the gtag preset in <head>; the rest as eager <script> tags), competing with React hydration and delaying LCP. Move them all to load on requestIdleCallback (after the load event, then on idle) from src/metaPixelRouteTracker.js. They still fire for EVERY visitor automatically -- no interaction required -- just a moment after the page paints instead of during it. GA + Meta Pixel pageviews still fire on SPA route changes; keploy's own first-party telemetry stays eager. Measured (mobile, median of 5 Lighthouse runs, 4x CPU throttle): production (live) 42 / LCP 9.5s this PR, trackers eager 68 / LCP 4.0s this PR, idle-deferred 79 / LCP 2.9s Desktop ~96 / LCP 1.2s; CLS 0 throughout. Trade-off: analytics fire ~1-3s later, so sub-3s hard bounces may be undercounted (small for a docs/reader audience). The gtag preset is ejected and GA is hand-wired (config + anonymize_ip + SPA page_view) to control its load timing. Signed-off-by: dhananjay6561 <dhananjayaggarwal6561@gmail.com>
…->85) Follow-up to the idle-deferral. Two changes to the analytics loading: - Remove Hotjar entirely (delete static/scripts/feedback.js). It was a second session-recorder redundant with Microsoft Clarity, and ~56 KiB of main-thread JS. In the docs repo since the 2022 initial commit; not needed. - Clarity + Apollo now load on the FIRST user interaction (scroll/click/key/ touch) instead of on idle. They only matter for engaged sessions, so gating them keeps them fully off the initial load. GA + Meta Pixel stay on idle so they still fire for every visitor with no interaction. Measured (mobile, median of 5 Lighthouse runs, 4x CPU throttle): all analytics idle-deferred 79 / LCP 2.9s / TBT 630ms Hotjar removed + Clarity/Apollo gated 85 / LCP 2.8s / TBT 437ms (best 90/1.5s) Desktop ~96; CLS 0 throughout. Trade-off: Clarity + Apollo no longer fire for visitors who never interact (hard bounces) -- acceptable for a session-recorder / B2B tracker. GA + Meta Pixel still fire for 100% of visitors on idle. Signed-off-by: dhananjay6561 <dhananjayaggarwal6561@gmail.com>
94bf5a1 to
9d68f6b
Compare
Per product requirement, GA and the Meta Pixel must fire instantly for accurate
analytics/conversion tracking, so they are NOT idle-deferred:
- GA -> standard gtag preset (eager, auto SPA tracking)
- Meta Pixel -> inline snippet in headTags (init + PageView on load); SPA
re-fire stays in src/metaPixelRouteTracker.js
Clarity + Apollo remain interaction-gated; Hotjar stays removed.
Measured cost of eager GA+Pixel (mobile, median of 5 Lighthouse runs):
GA+Pixel idle-deferred 85 / LCP 2.8s / TBT 437ms
GA+Pixel eager (this) 68 / LCP 4.8s / TBT 477ms
i.e. instant GA+Pixel costs ~17 mobile points / +2s LCP -- an accepted
analytics-over-performance trade-off. Desktop ~96; CLS 0.
Signed-off-by: dhananjay6561 <dhananjayaggarwal6561@gmail.com>
Claude Review Skill, Iteration 3Scope: the 4 commits landed after Iteration 2 ( VERDICT: 🔄 REQUEST CHANGES (1 blocking). No code here is wrong. The blocker is that 3 tickets marked ✅ Done ship nothing to real users. Tally: 🔴 1 · 🟡 4 · 🟢 4 · 💡 2 · 📚 1 · 🎉 5 🔴 BLOCKING (1)🔴 D8 / X6 / X7 never reach production.
|
- 🟡 Cache-Control on the S3 deploy was malformed (`max-age:86400`, colon), serving an invalid header so D1 fonts + D3 videos got no repeat-visit cache. Fixed to `max-age=86400` (main.yml). - 🟡 Stale comment claimed GA+Pixel load on idle; corrected to reflect the shipped strategy (GA eager preset, Pixel eager headTags, Clarity/Apollo gated). - 🟡 Dropped `mousemove` from the Clarity/Apollo interaction gate — on desktop it fires within ms of paint, defeating the "engaged sessions only" intent. - 🟡 Made 12 hardcoded `https://keploy.io/docs/...` video poster/source URLs relative (`/docs/...`), matching the other 18 — now verifiable in preview/local. - 🟢 asset-budget X3 guard now also scans `*.css` (an @import font URL could slip past the js/md-only pathspec). - 🟢 Downscaled record-api.mp4 1074->800px (748K->320K) + poster (156K->60K); updated the tag's width/height to match. - 💡 Deleted dead JS D2 missed: code-block-buttons.js, fullstory.js, chat.js (0 refs) and the orphaned commented <script> block. - 📚 Hardened remarkImageSize.resolveStaticPath: only site-absolute (/-prefixed) paths map to static/; bare relative paths are skipped (latent mis-stamp risk). Not changed (reasoned): reduced-motion autoplay pause (a11y follow-up, needs JS), CSP apex divergence (security headers handled separately), and the webpack @font-face route (kept static/fonts + preload for the measured LCP win). Signed-off-by: dhananjay6561 <dhananjayaggarwal6561@gmail.com>
Claude Review Skill, Iteration 4Scope: commit VERDICT: 💬 COMMENT. Code is ready to merge. Eight of nine findings are fixed correctly and I confirmed each one rather than taking the commit message for it. One item is left: it is a description fix, not a code fix. Tally: 🔴 0 · 🟡 1 (description only) · 🟢 2 open · ✅ 8 fixed ✅ FIXED AND VERIFIED (8)
CI is green on all 7 checks. 🟡 STILL OPEN (1, description only)🟡 D8 / X6 / X7 were deleted from the ticket table instead of being re-labeled. The rows are gone from the status table, but:
The PR summary says: "Genuinely-blocked tickets (and why) are listed at the bottom so nothing is silently dropped." These are now silently dropped, which is the one outcome that sentence rules out. Deleting the row also loses the finding: the next person to pick up D8 has no record that Fix: move D8 / X6 / X7 into the "Not in this PR" table with the reason (production 🟢 NOT ADDRESSED, FINE TO DEFER (2)
The 💡 about moving the font to 🎉 PRAISE
Reviewed with the code-review-skill four-phase process. Severity: 🔴 blocking · 🟡 important · 🟢 nit · 💡 suggestion · 📚 learning · 🎉 praise. |
Summary
Core Web Vitals + web-quality fixes for the docs site, from the Aug 2026 web-quality action plan (docs tickets D1–D11 and the docs-relevant cross-cutting X/H items).
Docs mobile was failing LCP (~2.6s) mainly on render-blocking web fonts and heavy GIFs. This PR lands every ticket that can be done without a new runtime dependency and without breaking anything — all build-verified. Genuinely-blocked tickets (and why) are listed at the bottom so nothing is silently dropped.
📊 Ticket status
Every docs ticket from the action plan, verified on the served version (v4.0.0 —
CURRENT_DOCS_VERSION; v3.0.0 is not built).Fileverified on this branch.LCPlatin+latin-ext); drop render-blocking Google Fonts<link>src/fonts/DMSans-*.woff2,src/css/custom.css,docusaurus.config.jsLCPDEADstatic/{gif,img,cms}LCP<video>static/gif,static/img, 24×*.mdLCPsrc/metaPixelRouteTracker.js,docusaurus.config.jsCLSwidth/heighton raw<img>(dependency-free remark plugin)src/remark/remarkImageSize.js,docusaurus.config.jsLCPdocusaurus.config.jsA11Yaria-hiddenon 5 footer social + 12 decorative component SVGssrc/theme,src/componentsDEAD"Aeonik"font-familysrc/css/custom.cssSECdevtool: source-map, client-only)docusaurus.config.jsPROC.github/workflows/asset-budget.ymlPROCfonts.googleapis.com/csslink.github/workflows/asset-budget.ymlA11YSEOSEO📊 Measured performance (Lighthouse, mobile, median of 9 runs)
Both rows were measured back-to-back on the same machine, so the delta is apples-to-apples. Lab scores are noisy (±10–15 pts run-to-run, and absolute values shift with machine/network/CDN state) — the delta is the reliable signal, not any single number.
keploy.io/docs)Desktop (shipped): 99 (96–100) / LCP 0.8s / CLS 0.
Net: +20 mobile perf, −2.0s LCP, CLS a perfect 0. Best mobile runs hit 84 / LCP 2.9s; desktop is fully green. Mobile LCP (3.1s) is still above the 2.5s line — the residual is Docusaurus's own React hydration (771 KB) plus the two eager trackers (GA + Meta Pixel), kept eager by product requirement for analytics accuracy.
⚖️ Analytics loading strategy
✅ Changes
Performance — LCP
D1 · Self-host DM Sans
DM Sans loaded via a render-blocking
<link rel="stylesheet">tofonts.googleapis.cominheadTags. Now self-hosted as a variable woff2 (latin+latin-extsubsets) insrc/fonts/, wired via@font-faceincustom.css— mirroring the existing Roboto setup (font-display: swap). It's the same font Google serves modern browsers (DM Sans v17 variable), so letterforms are identical; only the source changes.D6 · Fewer preconnects
Dropped the two now-unused font preconnects. Preconnects 6 → 4 (algolia, keploy.io, GA, GTM) — clears the ">4 preconnect" warning.
D2 · Delete dead heavy assets (~62 MB)
git rmof 6 assets confirmed 0-ref (grepped repo-wide first):static/gif/unit-test.gifstatic/img/unit-test.gifstatic/img/record-testcase.gifstatic/gif/interoperability.gifstatic/gif/tc-generation.gifstatic/cms/reactor.pngD3 · Convert heavy in-use GIFs to H.264 MP4 (7.44 MB → 1.60 MB, −78%)
The four referenced GIFs over 1 MB were the largest remaining LCP/bandwidth cost. Each was re-encoded to H.264 MP4 with
faststart(recipe R3) and the GIF deleted:gif/record-replaygif/replay-tcgif/how-keploy-worksimg/record-apiAll 30 live references across 24 files (v1/v2/v3/v4) were swapped from
<img>/![]()to a<video autoPlay loop muted playsInline>element. Each carries explicitwidth/height(so the browser reserves layout space — a CLS win alongside the LCP one) plus anaria-labeldescribing the clip, preserving the alt text the GIFs had. Autoplaying muted inline video keeps the existing "animated screenshot" behaviour on both desktop and mobile Safari.D4 · Analytics loading
GA and the Meta Pixel fire eagerly — GA via the standard
gtagpreset (auto SPA tracking), the Pixel via an inlineheadTagssnippet (init+PageViewon load,<noscript>fallback intact). This is a product requirement (accurate analytics/conversion from first paint), so they are not deferred — the measured LCP cost is shown in the table above. Clarity + Apollo load on the first user interaction (engaged sessions only), and Hotjar was removed (redundant session-recorder).src/metaPixelRouteTracker.jsre-fires the PixelPageViewon SPA route changes and drives the Clarity/Apollo interaction gate.Performance — CLS
D5 · Intrinsic
width/heighton raw<img>tagsDocusaurus's mdx-loader already resolves and sizes Markdown images (
renders withwidth/height+ a content-hashed asset), but it leaves hand-written HTML<img>tags in.md/.mdxuntouched — and those are the remaining source of layout shift. A new dependency-free remark plugin (src/remark/remarkImageSize.js) stamps each raw<img>with the image's intrinsicwidth/height, giving the browser an aspect ratio to reserve space. The globalimg { max-width:100%; height:auto }rule keeps images fully responsive — the attributes only supply the ratio, not a fixed size.Why no dependency: the repo carries both
yarn.lockandpackage-lock.json(Vercel uses yarn, CI uses npm), soimage-size/rehype-img-sizewould mean keeping two lockfiles in sync. The plugin reads PNG/GIF/JPEG headers itself. The parser is chosen by magic bytes, not extension, so a mislabeled file (this repo has one PNG saved as.jpg) is still sized correctly — verified againstsipsacross all 188 raster assets (188/188 exact match). It never throws, skips remote/relative/data:/webp/svg, and never overwrites author-provided dimensions.Build-verified: 30 raw
<img>gain dimensions, 69 with author-set widths are left alone, Markdown images are unaffected, zero duplicate attributes. No.md/.mdxsource files change — sizing happens at build time.Source maps
D11 · Client source maps
A
configureWebpackplugin setsdevtool: 'source-map'for the client bundle only — no new dependency, emits.mapfiles for debuggable first-party JS, zero runtime impact (428 maps emitted).Accessibility
D9 · Decorative SVGs (+ X4)
Added
aria-hidden="true"to the 5 footer social icons (their<a>already carriesaria-label) and 12 decorative component icons.DocItemtheme SVGs already had it.D10 · Remove dead font reference
Removed the
"Aeonik"font-family— referenced for headings but never defined via@font-face, so it always fell through to the system stack.Process / CI
X1 + X3 · Asset & font budget guard
New
.github/workflows/asset-budget.yml, scoped to files changed in the PR:fonts.googleapis.com/css…), enforcing D1.PR-scoped by design, so pre-existing large assets never fail an unrelated PR — only new regressions are caught.
H1 · SEO sanity — verified
robots.txt,sitemap.xml, canonical links, and JSON-LD are all present/valid; no change needed.🔎 Review feedback addressed
report-tocollector should be wired before enforcing (no fake endpoint added).🔧 Keeping the linters happy
The D3
<video>markup tripped two checks; both are fixed in this PR:<source>child. The two versions disagree on how: 2.8.8 wants a blank line after the opening tag (which would split the JSX block), while 3.9.6 wants the child dedented to column 0. The workflow pins 2.8.8 but the action resolves to 3.9.6, so rather than target either, each<video>/<source>/</video>trio is collapsed onto one line — verified clean under both versions.autoPlayandplaysInlineas misspellings. They're JSX attribute names, not prose, so they're added to the Base vocabulary alongside the other camelCase identifiers already accepted there (borderRadius,containerName,matchLabels, …).❌ Not in this PR (and why)
SEOSoftwareApplicationJSON-LD block (the correct schema.org type for a dev tool; a separateProducttype would be redundant/conflicting). The "review" half is deliberately omitted:aggregateRating/Reviewmarkup for one's own product on one's own domain violates Google's structured-data policy (self-serving reviews) and can trigger a manual action suppressing all rich results. Real ratings are surfaced the correct way — viasameAslinks to G2/Gartner/Capterra/AWS Marketplace in the Organization schema.✅ Verification
npm run build→[SUCCESS];onBrokenLinks: "throw"passes (the D2 deletions and D3 swaps break zero references).gstatic/googleapispreconnect; 4 preconnects total.[//]: #markdown comments that predate this PR); 30<video>elements across 24 files, each withwidth,height, andaria-label; MP4s total 1.53 MiB.sipson 188/188 raster assets; built HTML shows 30 raw<img>with injectedwidth/height, 69 author-sized tags untouched, Markdown images unaffected, 0 duplicate attributes; disabling the plugin drops the attributes (isolation confirmed).headTagssnippet,init+PageView,<noscript>intact); Clarity + Apollo load on first interaction; Hotjar removed; SPAPageViewre-fired from the client module.aria-hidden(per-tag verified).Aeonikfont-family remains..js.mapfiles emitted.robots.txt,sitemap.xml, canonical, JSON-LD all present/valid.prettier --checkclean on all changed files under both 2.8.8 and 3.9.6; Vale clean on changed lines; noyarn.lockchurn.