Quality
What the theme does about security, accessibility, performance and testing.
Built in, not bolted on
Security
Content Security Policy and HSTS headers, nonces, rate limiting for AJAX handlers, sanitized SVG uploads and editor input.
Accessibility
Playwright runs axe checks against the pages. Mobile navigation traps focus, only the first hero is an h1, videos take captions.
Performance
Non-critical scripts deferred, fonts and styles preloaded, above-the-fold CSS inlined, images with responsive srcset.
Tests
PHPUnit for PHP, Vitest for scripts and the token generator, Playwright for end-to-end and accessibility tests.
Static analysis
PHPStan, PHP_CodeSniffer and ESLint run before a change goes in.
Releases
Semantic versioning from conventional commits, a generated changelog and checksummed release packages.
Changelog on GitHubOn this site
No tracking, no cookies
Visitors get no cookies and nothing loads from third-party hosts. Fonts, scripts, images and the demo video come from this server.
Checked in the browser
Every page is checked with axe on desktop and phone sizes before it goes live.