Browsers will use heuristic caching, which can be unpredictable. Set explicit cache headers.
No Cache-Control header
Adding a Cache-Control header can significantly improve repeat-visit performance.
C
Image Optimization
Action
19 images, 0 KB saveable
REVIEW
19 images, 0 KB saveable
Warning::
!
https://www.cpsc.gov/sites/default/themes/cpsc/ass... is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
Warning::
!
https://www.cpsc.gov/s3fs-public/2026-08/squishy-g... is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
Warning::
!
https://www.cpsc.gov/s3fs-public/ocoopa-1.jpg?Vers... is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
Warning::
!
https://content.govdelivery.com/attachments/fancy_... is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
Warning::
!
https://www.cpsc.gov/s3fs-public/SafetyAlert_5101_... is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
Warning::
!
https://www.cpsc.gov/s3fs-public/2024-09/CPSC_smal... is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
Warning::
!
https://www.cpsc.gov/sites/default/themes/cpsc/ass... is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
Warning::
!
https://cdn.jsdelivr.net/npm/@uswds/uswds@3.4.1/di... is missing width/height — may cause layout shift
Set explicit width and height to prevent CLS.
19images3.1 MB
0oversized-0 KB
17legacy format
8missing dimensionsCLS risk
Set explicit width and height to prevent CLS.
Why this matters
Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.
Source: web.dev / Core Web Vitals
Set explicit width and height to prevent CLS.
Why this matters
Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.
Source: web.dev / Core Web Vitals
Set explicit width and height to prevent CLS.
Why this matters
Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.
Source: web.dev / Core Web Vitals
Set explicit width and height to prevent CLS.
Why this matters
Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.
Source: web.dev / Core Web Vitals
Set explicit width and height to prevent CLS.
Why this matters
Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.
Source: web.dev / Core Web Vitals
Set explicit width and height to prevent CLS.
Why this matters
Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.
Source: web.dev / Core Web Vitals
Set explicit width and height to prevent CLS.
Why this matters
Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.
Source: web.dev / Core Web Vitals
Set explicit width and height to prevent CLS.
Why this matters
Image without explicit width/height — browser can't reserve space; CLS jumps when image loads.
Source: web.dev / Core Web Vitals
C
Document Compression
Action
Document response served uncompressed
REVIEW
Document response served uncompressed
Info::
i
Main HTML response has no Content-Encoding (uncompressed)
The main HTML document is served without compression. The Text Compression section above lists the broader picture; for the main response specifically, even gzip would shave ~70-80% off most text payloads.
B
Main HTML Cache-Control
No Cache-Control header on main HTML response
REVIEW
No Cache-Control header on main HTML response
Info::
i
Main HTML response has no Cache-Control header
Without an explicit Cache-Control, browsers fall back to heuristic caching (~10% of Last-Modified age). Set `Cache-Control: no-cache` or `max-age=300` for HTML to control freshness explicitly -- prevents stale auth state and SPA shell drift.
B
Server-Timing Observability
No Server-Timing header found
REVIEW
No Server-Timing header found
Info::
i
No Server-Timing header found
Server-Timing exposes backend timing breakdowns to browser DevTools (e.g., `db: 45ms; render: 120ms; cache: 2ms`). Useful for diagnosing slow pages without backend log access. Most modern frameworks (Next.js, Cloudflare Workers, Fastly) emit it automatically; absence on a managed platform usually means telemetry headers are stripped at the edge.
B
JavaScript Blocking
1 JS blocking issue(s) detected
REVIEW
1 JS blocking issue(s) detected
Warning::
!
43 render-blocking <script src> tag(s) without async/defer
Each `<script src=...>` without `async`, `defer`, or `type="module"` blocks HTML parsing while the browser fetches and executes it. The block lasts the entire round-trip + execution time -- on slow networks this translates directly into LCP delay. Add `defer` (executes after parse, in source order) for scripts that interact with the DOM, or `async` (executes whenever ready) for analytics / independent scripts. Module scripts (`type="module"`) are deferred by default.
Each `<link rel="stylesheet">` without a non-blocking `media` attribute holds up the first paint. Browsers download all of them before painting any content. Consolidate into 1-2 critical-path stylesheets; defer non-critical CSS via `<link rel="stylesheet" media="print" onload="this.media='all'">` or via the loadCSS pattern; inline above-the-fold CSS in `<style>` to short-circuit the request entirely.
Info::
i
1 `@import` rule(s) in inline `<style>` blocks -- chains an extra round-trip
Each `@import` in CSS forces a serial dependency: the parent stylesheet must download and parse before the browser even knows which URL to fetch next. This used to be catastrophic on HTTP/1.1; HTTP/2 and HTTP/3 multiplexing make it less painful but still strictly worse than declaring `<link rel="stylesheet">` siblings. Replace `@import url(...)` with `<link rel="stylesheet" href="...">` in HTML so the browser discovers and fetches in parallel.
C
Green Hosting
Action
Whether the site is served from green-energy infrastructure
REVIEW
Green Hosting
No green hosting detected
A+
Text Compression
All text resources are compressed
PASS
All text resources are compressed
Info::
✓
All text resources are compressed
All text resources are properly compressed.
A+
Font Loading
10 fonts (524 KB)
PASS
10 fonts (524 KB)
Info::
i
10 font(s) use font-display: swap (FOUT risk but functional)
Web fonts
10
524 KB total
Render-blocking
0
of 10
Dominant font-display
swap
Most common across fonts
Font loading timeline
TransferFOIT (block)FOUT (swap)
sourcesanspro-regular-w...woff2swap
Size21 KB
Load time42 ms
Start705 ms
RiskFOUT — text flashes from fallback to web font
sourcesanspro-bold-webf...woff2swap
Size21 KB
Load time47 ms
Start705 ms
RiskFOUT — text flashes from fallback to web font
sourcesanspro-italic-we...woff2swap
Size17 KB
Load time34 ms
Start705 ms
RiskFOUT — text flashes from fallback to web font
sourcesanspro-bolditali...woff2swap
Size17 KB
Load time47 ms
Start705 ms
RiskFOUT — text flashes from fallback to web font
fa-brands-400.woff2woff2swap
Size107 KB
Load time29 ms
Start888 ms
RiskFOUT — text flashes from fallback to web font
Subset this font — over 100 KB suggests Latin Extended or full glyph coverage that most pages don't need
fa-solid-900.woff2woff2swap
Size147 KB
Load time155 ms
Start888 ms
RiskFOUT — text flashes from fallback to web font
Subset this font — over 100 KB suggests Latin Extended or full glyph coverage that most pages don't need
fa-brands-400.woff2woff2swap
Size75 KB
Load time22 ms
Start1.0 s
RiskFOUT — text flashes from fallback to web font
fa-solid-900.woff2woff2swap
Size78 KB
Load time29 ms
Start1.0 s
RiskFOUT — text flashes from fallback to web font
flexslider-icon.woffwoffswap
Size1 KB
Load time123 ms
Start1.1 s
RiskFOUT — text flashes from fallback to web font
Convert to woff2 for ~30% smaller file size
memvYaGs126MiZpBA-UvWbX...woff2swap
Size42 KB
Load time55 ms
Start1.2 s
RiskFOUT — text flashes from fallback to web font
Optimization checklist
Preload critical fonts (priority=high)
Use woff2 format for all fonts
Set font-display to swap, optional, or fallback
Subset large fonts (≤100 KB each)
Fixing the unchecked items could save ~127 KB and ~254 ms
A+
Resource Caching
All resources properly cached
PASS
All resources properly cached
Info::
✓
No caching issues found
All static resources have appropriate caching headers.
A+
Critical Rendering Path
No render-blocking resources
PASS
No render-blocking resources
Info::
✓
No render-blocking resources detected
A+
Resource Hints
No optimization needed
PASS
No optimization needed
Info::
✓
No resource hint issues
A+
HTTP/3 (QUIC)
HTTP/3 advertised via Alt-Svc
PASS
HTTP/3 advertised via Alt-Svc
Info::
✓
HTTP/3 (QUIC) is supported
First-load mobile users on cellular networks see meaningful latency improvements with HTTP/3. The QUIC transport collapses TLS + TCP handshakes into one and recovers faster from packet loss.
A+
Asset Compression
All 2 asset hosts use brotli
PASS
All 2 asset hosts use brotli
Info::
✓
cdn.jsdelivr.net serves assets with brotli (assets: 6)
Got: cdn.jsdelivr.net (text/css)
Info::
✓
www.googletagmanager.com serves assets with brotli (assets: 6)
LCP image preload audit not available for this scan
A+
Server Response Intelligence
1 server-response signal(s) detected
PASS
1 server-response signal(s) detected
Info::
i
No `ETag` or `Last-Modified` -- conditional GET not supported
Without either header, browsers can't issue conditional GETs and refresh always re-downloads the full response body even when nothing changed. Add `ETag: "<hash>"` (or `Last-Modified: <date>`) on cacheable responses; the server returns 304 Not Modified when the client's cached copy is still valid, saving bandwidth.
A+
Render-Blocking Resources
No render-blocking resources detected
PASS
No render-blocking resources detected
Info::
✓
No render-blocking resources detected in <head>
A+
Third-Party Resources
No third-party resources detected
PASS
No third-party resources detected
Network Waterfall
119 requests over 2223ms
INFO
HTML JavaScript CSS Images Fonts XHR/Fetch Other
Third-Party Script Cost
Per-script blocking time, transfer cost, and cache headers
INFO
83%of JavaScript execution is third-party
First-party Third-party2596ms · 1159KB · $34/mo
Script
Category
Execution
Transfer
Unused
Monthly Cost
Verdict
Google Tag Manager
www.googletagmanager.com
Tag Manager
566ms
178 KB
41%
$8/mo
Costly
Google Tag Manager
www.googletagmanager.com
Tag Manager
418ms
179 KB
41%
$6/mo
Costly
www.cpsc.gov
www.cpsc.gov
Other
349ms
17 KB
—
$5/mo
Costly
Google Tag Manager
www.googletagmanager.com
Tag Manager
255ms
162 KB
43%
$3/mo
Costly
content.govdelivery.com
content.govdelivery.com
Other
209ms
75 KB
49%
$3/mo
Costly
jsDelivr
cdn.jsdelivr.net
CDN
191ms
26 KB
—
$3/mo
Optional
Google Tag Manager
www.googletagmanager.com
Tag Manager
132ms
89 KB
58%
$2/mo
Optional
www.cpsc.gov
www.cpsc.gov
Other
114ms
32 KB
—
$2/mo
Optional
dap.digitalgov.gov
dap.digitalgov.gov
Other
86ms
4 KB
—
$1/mo
Optional
www.cpsc.gov
www.cpsc.gov
Other
77ms
1 KB
—
$1/mo
Optional
Google Tag Manager
www.googletagmanager.com
Tag Manager
71ms
178 KB
68%
$1/mo
Optional
Google Tag Manager
www.googletagmanager.com
Tag Manager
64ms
162 KB
72%
$1/mo
Optional
www.cpsc.gov
www.cpsc.gov
Other
64ms
58 KB
—
$1/mo
Optional
Google Tag Manager
Tag Manager
Costly
Execution566ms
Transfer178 KB
Unused41%
Monthly Cost$8/mo
Google Tag Manager
Tag Manager
Costly
Execution418ms
Transfer179 KB
Unused41%
Monthly Cost$6/mo
www.cpsc.gov
Other
Costly
Execution349ms
Transfer17 KB
Monthly Cost$5/mo
Google Tag Manager
Tag Manager
Costly
Execution255ms
Transfer162 KB
Unused43%
Monthly Cost$3/mo
content.govdelivery.com
Other
Costly
Execution209ms
Transfer75 KB
Unused49%
Monthly Cost$3/mo
jsDelivr
CDN
Optional
Execution191ms
Transfer26 KB
Monthly Cost$3/mo
Google Tag Manager
Tag Manager
Optional
Execution132ms
Transfer89 KB
Unused58%
Monthly Cost$2/mo
www.cpsc.gov
Other
Optional
Execution114ms
Transfer32 KB
Monthly Cost$2/mo
dap.digitalgov.gov
Other
Optional
Execution86ms
Transfer4 KB
Monthly Cost$1/mo
www.cpsc.gov
Other
Optional
Execution77ms
Transfer1 KB
Monthly Cost$1/mo
Google Tag Manager
Tag Manager
Optional
Execution71ms
Transfer178 KB
Unused68%
Monthly Cost$1/mo
Google Tag Manager
Tag Manager
Optional
Execution64ms
Transfer162 KB
Unused72%
Monthly Cost$1/mo
www.cpsc.gov
Other
Optional
Execution64ms
Transfer58 KB
Monthly Cost$1/mo
These scripts may cost more than they're worth
Google Tag Manager adds 566ms and costs ~$8/month
Google Tag Manager adds 418ms and costs ~$6/month
www.cpsc.gov adds 349ms and costs ~$5/month
Google Tag Manager adds 255ms and costs ~$3/month
content.govdelivery.com adds 209ms and costs ~$3/month
83% of JavaScript execution time is spent on third-party scripts. Consider auditing which scripts are essential.
Why this matters
When third-party JS execution time exceeds your own, performance gains from frontend work are capped by code you don't own.
Learn more ▾▴
Every millisecond of third-party JS competes with your own for main-thread time. If their share is bigger than yours, optimization on your code base barely moves the needle. Audit, defer, or remove third-parties before further frontend optimization. Use Lighthouse's third-party audit to identify the worst offenders.
Source: web.dev
Google Tag Manager takes 566ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
Google Tag Manager takes 418ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
www.cpsc.gov takes 349ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
Google Tag Manager takes 255ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
content.govdelivery.com takes 209ms of CPU time. Consider loading it asynchronously or replacing it with a lighter alternative.
Why this matters
This script has high main-thread execution time — optimize hot paths or defer.
Source: web.dev
58% of Google Tag Manager's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.
Source: web.dev
68% of Google Tag Manager's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.
Source: web.dev
72% of Google Tag Manager's code is unused. The script may be loading features you don't use.
Why this matters
Bundle has high unused-code ratio — tree-shaking and route-splitting recover the wasted bytes.