Co-authored arXiv paper presenting an automated HTTP API quality assessment framework. Playwright-based browser instrumentation captured 108 HAR files across 18 production websites, applying 8 heuristic anti-pattern detectors to produce a composite quality score per site.
Network-layer quality deficiencies (redundant requests, missing cache headers, oversized payloads, excessive third-party scripts) are rarely tested systematically, and carry direct security implications including cache poisoning and supply-chain attack surface expansion.
Built a Playwright-based browser instrumentation framework capturing full HTTP traffic across 18 production sites in 11 categories. Applied 8 heuristic anti-pattern detectors producing a composite 0–100 quality score. Linked API-layer deficiencies to security risks with reproducible open-source artifact.
Found one site making 2,684 requests/page (447× the minimum). Redundant API calls and missing cache headers each affect 67% of sites; third-party overhead exceeds 20% on 72% of sites. Mean composite score 76.9 (range 56.8–100).
Ask Bilal’s AI Clone