Is openai.com vibe coded?

Reading this score

openai.com landed on 11/100, which puts it in the hand-written band. That number is not a percentage and not a probability — it is strength of evidence: 38 points of tells, damped by craft, less 49 points of deliberate decisions, mapped through one logistic curve.

What pushed it up

• Heavy for what it renders +10 — 92 script files and 439 KB of HTML to render 513 words. A full framework, an icon library and an animation library for a page a hundred kilobytes could serve.
• Copy that never says who it is for +9 — 513 words, and still no price, no contact route and no named audience. The page describes a category, not a business.
• Dependency sprawl +8 — 2 third-party asset hosts and 92 script files. Each sub-problem got whatever library was most popular in the training data, and nothing was ever consolidated.
• Fixed pixel widths that will overflow a phone +8 — Hard pixel widths wider than a phone. Layouts break at sizes nobody prompted for, because desktop was the only viewport that got looked at.
• Backdrop blur everywhere +7 — 6 blurred surfaces.
• No H1 on the page +6 — Nothing on the page claims to be its subject.

What pulled it down

• Deliberate social preview −9 — Open Graph title and image were both authored.
• Skip-to-content link −9 — A keyboard skip link exists. Generators do not do this.
• prefers-reduced-motion honoured −8 — Motion preferences are respected in inline styles.
• Hand-written ARIA −7 — 112 explicit accessibility attributes.
• Semantic landmarks −6 — 5 landmark elements instead of a pile of divs.
• CSS custom property system −6 — 636 CSS custom properties — a real token layer.
• Canonical URL −4 — Canonical link is set.

Craft we looked for and did not find

These are the actionable half of the report. None of them are hard, and every one of them would have moved the number.

• Structured data
• Self-hosted typography
• Hand-authored stylesheet
• No utility-class soup

What this scan cannot see

One request, no JavaScript executed. So everything below is invisible to us, and a page can be excellent or awful at all of it without moving the score:

• Domain registration age — needs WHOIS.
• Whether the nav's /about and /pricing actually resolve — needs a crawl, not one fetch.
• package.json dependency count, orphaned code, clashing abstractions, test coverage — needs the repo.
• Backend security shortcuts: string-built SQL, verify=False, missing auth on endpoints — needs the source.
• Whether row-level security or Firebase rules are actually switched on — needs the project.
• Console errors, hydration warnings and runtime 404s — needs a browser executing the page.
• Real Lighthouse numbers and horizontal scroll at 375px — needs a rendered viewport.
• Whether a JS-handled form posts anywhere — needs a submitted request.