TODO
- Team agreed on technology set
- Licenses, cost of infrastructure etc. covered
- Operating model (including SLAs) determined
- Business plan worked out
- List of supported browsers is available
- Build process fully automated
- Error reporting on Frontend included
- Error reporting on Backend included
- Data backup is in place and securely stored
- Scalability determined
- Static resources are hosted on a CDN if necessary
- End-to-end tests for all supported browsers available
- Emitted JS is bundled and minified
- Emitted CSS is bundled and minified
- Emitted CSS is auto-prefixed
- Bundle structure encourages cache reuse
- Emitted HTML is minified
- All emitted resources can be cached (e.g. use hashed name)
- Emitted HTML is minified
- All emitted resources can be cached (e.g. use hashed name)
- PWA enhancements are included (e.g. advanced caching)
- Include noscript section(s)
- Optimize link texts, image descriptions, and tab orders
- Verify the color palette and background to foreground color ratio
- A printer-friendly view exists
- No secrets, keys, or tokens are transmitted to the client
- HTTPS is required and active for every call
- SSL security (TODO add service list)
- Upload fields are protected by a virus scanner service
- A privacy consent notification is displayed once
- Links for imprint, data protection, and further legal information available
- Includes information about tracking, third-party integrations, use of data, etc.
- GDPR
- A meaningful robots.txt is provided
- Analytics is setup and works correctly with SPA
- Metadata (e.g. user properties) set up correctly
- Keyboard shortcuts
- Tooltips
- Builtin error reporting