Site Health Report Card

github.com

  • GitHub
  • Tech · Code
  • Online since 2008
  • Checked Sep 30, 2026

“Fast, strict, and judging your commit messages.”

Pica's take. GitHub is quick, locked down, and invites no outside scripts at all. It is the tidiest workshop on this list. Your repositories may be a mess, but the building is not.

A+98 / 100

Overall health

#4 of 100 sites graded

  • Largest paint

    1.9s

  • Page weight

    2.6 MB

  • Requests

    55

  • Third-party scripts

    0

  • Domain age

    18 yrs

  • Blocklists

    0 / 60

Timed by our own browser

Site Speed

A
95

In excellent shape.

Largest paint (LCP)
1.9s
First paint (FCP)
0.9s
Server response (TTFB)
190 ms
Layout shift (CLS)
0.02
Page weight
2.6 MB
Requests
55

Pica: Two and a half megabytes. Merged cleanly.

Run the Speed Test on github.com

A look from the outside

Security Check

A+
100

In excellent shape.

HTTPS everywhere
Yes
HSTS
Preloaded
TLS
1.3
Content Security Policy
Strict
Mixed content
None
Third-party scripts
0

Pica: Strict policy, zero outside scripts. A very tidy shop.

Run the Hack Check on github.com

What the internet says about it

Reputation Check

A
95

In excellent shape.

Domain age
18 years
Blocklists
0 of 60
Malware reports
None
Email authentication
DMARC reject
Certificate
Valid · 90 days
Lookalike domains
Some

Pica: Eighteen years old. Has seen every file named final_final_v2.

Run the Tracker Check on github.com

Is it in a good neighborhood?

Hosting Check

A+
100

In excellent shape.

Network
GitHub · AS36459
Content delivery
Fastly + own
IPv6
Yes
HTTP/3
Yes
Shared-IP neighbors
GitHub properties
Flagged neighbors
0

Pica: Its own network, with Fastly out front.

Run the TTFB Check on github.com

Want a report card for your site?

Pica runs these checks on your site every day, and only writes when a grade slips. $11.11 a month for 50 sites.

Watch my website

More report cards

Browse all 100

How we grade. Four checks, weighted equally: speed timed by our own browser, a security look from the outside, public reputation signals, and the network the site lives on. A look from the outside is not a server audit.