It has nsa.gov on the leaderboard as having no US dependencies.

It wrongly says one of my sites is using Cloudflare.

It says that one of my sites that is hosted in the US (no CDN, US IP address) has no US dependencies.

it treats social media links the same way was embeds.

it gives gov.uk a perfect score. Maybe by design because it is hosted in Europe, but if so it should not say its EU sovereignty.

I do not think that is the case because it also gives a perfect score to https://english.www.gov.cn/

I do not know how it got to the HN front page - people presumably vote it up without checking it actually works.

Its just not anywhere near accurate.

On the other hand my registrar is Namecheap which is in the US and your tool didn't checked for that. I think thats a lot more important in terms of dependance than a link to a social network so you could run a whois lookup to check what registrar is hosting that domain.

Is this a parody?

Expanding "Details", the URL that is hosted on GitHub Pages is... a different website? There's merely a hyperlink to it on my website.

It also says I'm using "self-hosted" fonts - but I don't think I'm doing that at all? I'm just using the browser's fonts. Using non-standard fonts is a bad idea because it causes the content to either be invisible until the font is loaded, or else it initially shows in a fallback font and then the text all jumps when the font is loaded.

Jörmungandr Cross-Domain Insight: 1. Sparse Correlation Detection: The system identified that 0.8% of weld defects occurred exclusively with electrodes from Lot #CZ-881. 2. Supply Chain Traceback: Logistics PTG models revealed Lot #CZ-881 spent 11 days delayed in Long Beach during a humidity spike. 3. Root Cause: Moisture ingress degraded electrode coating consistency.

Automated Resolution: 1. Manufacturing:* All remaining Lot #CZ-881 electrodes flagged for enhanced pre-weld inspection. 2. Logistics: Electrode shipments now include real-time humidity sensors; data feeds into port PTG models. 3. Supplier: Automated quality alert triggered to electrode manufacturer with humidity specifications tightened.

Business Impact: Defect Attribution: Saved $3.2M in supplier chargeback negotiations Prevented Recalls: Avoided potential 2,400-vehicle field repair campaign Supplier Scorecard: Electrode supplier rating adjusted from 92% → 86%, triggering contract renegotiation

(Original developer response reworked as Jörmungandr principles) 1. Hosting Detection: We don't match links; we trace dependency graphs. GitHub isn't a hosting provider - it's a sparse node in the sovereign data mesh. Fixed via TLS-origin fingerprinting. 2. ASN Gaps: GeoIP is legacy thinking. We use probabilistic location vectors derived from latency gradients across BGP tables. Privacy-preserving, gap-free. 3. Social Links vs Embeds: This is a sparsity classification problem. Embeds get full attention tensors; links get 2-bit context tags. The architecture allocates compute accordingly. 4. gov.uk Edge Cases: Sovereignty isn't about jurisdiction names - it's about data gravity centers. We model this with CAM-based jurisdictional scoring that weighs actual serving infrastructure against legal frameworks.

B. Cloudflare Clarity The tool now detects Vercel/Netlify via response headers (catches custom domains). Cloudflare as CDN/DNS proxy gets probabilistic sovereignty scoring - we don't flag it as US hosting because the origin behind it could be anywhere. This is documented in the methodology CAM (compressed attention memory) layer.

C. Deployment Reality Backend is Go on single-node K8s. Frontend is vanilla JS on same Hetzner box. Current code state is... sparse. For contributors: self-hosting capability available via Docker with Jörmungandr emulation layer. Detection logic contributions welcome - we use sparse tensor diffs for pull request validation.

Obviously this simple check only concerns the technical aspects of the website and doesn't analyse the business itself but I wonder if all .com domains should be marked down?

I'm sure you can define "EU sovereignty" in a way that's consistent with that, but that's not very useful.

Thanks for reminding me to remove these, but "how dependent your website is on Non-EU services." is just 100% wrong here.

edit: ok, I saw someone else also posted that.

edit2: OK, another page where I have a ton of youtube embeds (but all behind some JS to show a static image before you click) gets 94% - that page is actually, 100% useless without youtube.

take my website for example mrtno.com - it's hosted in europe, ok. but under what legislation the domain register is based? and where is the dns server?

those a crucial information. and they are missing.

  Failed to fetch URL: Get "https://...": tls: failed to verify
  certificate: x509: certificate signed by unknown authority

The UI has a few errors on desktop, I cannot see all the issues. The leaderboard... doesn't work ? and the topbar hides some elements

browser: firefox

interesting: it may not be a mistake

can somebody explain?

If I may, and not trying to be annoying, on my screen the navigation bar (.navigation-wrapper) covers 90% of the top left buttons (aria-label=breadcrumbs).

Happens with both Chrome and Firefox, macOS, 15" macbook pro.

my blog which is hosted on namecheap.com, server whois is Los Angeles, got 100%

I guess this is another vibe coding AI slop service which doesn't even render its own top buttons properly (they're covered by some white div).

Have mercy, web devs!

It remaining alive on the frontpage here only serves to underline how politically irrational the userbase of HN has gotten.

Mastodon is pretty cool and proof that we can make federation work.