← Back to browse

Savannah

Savannah is a central point for development, distribution and maintenance of free software, both GNU and non-GNU.

Developer Tools

Added May 12, 2026 · Last analysed May 12, 2026 · via Hacker News

StackScope records what new websites are built with, the week they launch. Most we find ourselves, by watching public internet infrastructure for brand-new sites; the rest come from Product Hunt, Hacker News and PeerPush. We crawled this one for its tech stack and scored it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 12 May 2026; the live site may have changed since.

Every technology below links to its own page: which other new sites launched with it. Vendors and agencies watch those pages with Stackdar and hear about new adopters the week they ship, from £15 a month.

Savannah still has work before launch. What needs work: missing several security headers, incomplete legal pages, and no sitemap.

Launched on Hacker News on May 12, 2026. The site is hosted on GNU Savannah. The crawl picked up 2 technologies on this site, covering hosting and servers. The stack includes GNU Savannah and nginx.

For context, it's a rare GNU Savannah sighting, just 1 in our data.

If you own this site, refresh the snapshot and see the full fix list any time →

3.0
StackScope Score
Poor
35/100 Launch Readiness
Partially ready
0/3 Legal
Missing
1/2 Crawl files
Partial
Vibe Score 5 · Few AI signals
How much the site looks AI-generated. Informational pattern-match signal, not a verdict. Does not feed the StackScope Score. See which fingerprints fired →

Tech Stack (2)

Infrastructure
Hosting GNU Savannah (3)
Server nginx

Infrastructure

DNSSEC
Not enabled
DNS responses unsigned. Cache-poisoning vulnerable.
Green hosting
Not green hosted
No green-energy record. Data from The Green Web Foundation.
SSL Certificate
Let's Encrypt
Valid 29 Mar 2026 to 27 Jun 2026
Certificate as captured in this snapshot, not a live check.

Email Security

SPF -all Strict (-all). Strong.
?
DKIM Not detected at common selectors. Your provider may use a custom one.
DMARC p=none (via apex nongnu.org) None (p=none). Monitoring only.
?
MTA-STS Not deployed. Mail to your domain can be downgraded to plaintext en route.
?
TLS-RPT Not configured. You won't hear about silent SMTP TLS handshake failures.

Storage (0)

This site uses no client-side storage we could detect on page load.

Readiness Breakdown How?

Custom title and meta description
Favicon present
- Open Graph tags (title, image, description)
- Responsive viewport meta tag
- Canonical URL declared
- Twitter card meta tags
- Semantic HTML (nav, main, article)

Vibe Score Breakdown How?

SignalPoints
AI code-structure signals +5

This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.

AI Stance

No AI stance declared
llms.txt published
No AI bots blocked in robots.txt
? No directive declared
? None advertised

Well-Known Files

robots.txt
sitemap.xml
security.txt
llms.txt
ads.txt
humans.txt
? Privacy Policy not detected
? Terms of Service not detected
Detection works best on English language sites.

Security Headers (2/6)

Permissions-Policy experimental (check browser support)
X-XSS-Protection deprecated (use Content-Security-Policy)

Performance

521ms response time
Faster than 29% of sites

Build

0 JS files
1 CSS files
0 Third-party domains
Something not look right? If a technology shown here is wrong or out of date, email [email protected] and we'll review it.