PorchlampFind the projects that leave the light on.2026-10-17

What happens to a stranger's pull request here, in the Porchlamp snapshot of 17 October 2026.

Outside pull requests to containers/bubblewrap got a first human reply in a median of 11.6 hours (26 pull requests, 18 April to 15 October 2026); 35% got none within 14 days. It ranks 1,084 of 3,219 overall. For first-time contributors it ranks 794 of 1,525 (the bottom 48%).

Key facts
Rank1,084 of 3,219
Score54.57
TierC
Median first reply11.6 hours
14-day no-reply share35%
First-timer rank794 of 1,525
EcosystemC and C++
Window18 April to 15 October 2026

Composite

Rank
1,084 of 3,219
Score
54.57
Tier
C
Coverage
98% · Full
Quadrant
Sweet Spot

Coordinates: leverage 50.5 (coverage 100%), friction 40.6 (coverage 97%)

Five pillars

Score out of 100, and how much of the pillar was measured
PillarScoreCoverage
Responsiveness66.1100%
Criticality44.9100%
Governance55.8100%
Rigor56.5100%
Accessibility48.085%

The measured parameters

Responsiveness

ParameterValueScoreCountWindowSource
Decision Rate (90d)Share of outside pull requests that were merged or closed within 90 days.60.0%75.01018 April to 17 July 2026primaryraw/pr_window/containers__bubblewrap.json
PR Ghost Rate (14d)Share of outside pull requests with no maintainer response, merge or close within 14 days.34.6%30.82620 April to 17 October 2026primaryraw/pr_window/containers__bubblewrap.json
First-timer Merge RateShare of first-time outside authors' decided pull requests that were merged.50.0%62.512—primaryraw/author_history/containers__bubblewrap.json
Time to First ResponseMedian hours from an outside pull request opening to its first substantive human reply.11.6 hours (0.5 days)100.02618 April to 15 October 2026primaryraw/pr_window/containers__bubblewrap.json
Time to Merge (p90)Hours within which 90% of merged outside pull requests were merged.2124.9 hours (88.5 days)2.21418 April to 15 October 2026primaryraw/pr_window/containers__bubblewrap.json

Criticality

ParameterValueScoreCountWindowSource
DependentsPackages in the registry that depend on this project, counted once each.Not shown: Not applicable
Monthly DownloadsDownloads from the package registry in a month.Not shown: Not applicable
OpenSSF CriticalityOpenSSF criticality score from 0 to 1, computed from the project's public activity signals.0.44944.9——proxy:no_dependents_signalraw/github_meta/containers__bubblewrap.json

Governance

ParameterValueScoreCountWindowSource
Elephant FactorThe fewest organisations that account for half of the last year's commits.125.089—primaryraw/commits_365d/containers__bubblewrap.json
Legal IP RegimeThe contributor licence regime: DCO, none, a foundation CLA or a corporate CLA.Sign-off on commits (DCO)100.0——primaryraw/governance/containers__bubblewrap.json
Promotion LadderHow openly a contributor can become a maintainer, from closed to verified.No written path to becoming a maintainer40.0——primaryraw/governance/containers__bubblewrap.json

Rigor

ParameterValueScoreCountWindowSource
AI Policy PostureWhether the project has a written policy on AI-assisted contributions.No written AI policy40.0——primaryraw/governance/containers__bubblewrap.json
Pipeline DefensesHow well the project's build and review pipeline defends against bad changes, 0 to 100.6060.0——primaryraw/scorecard/containers__bubblewrap.json
Substantive Review RateShare of decided pull requests that received a substantive review.54.6%68.22218 April to 15 October 2026primaryraw/pr_window/containers__bubblewrap.json

Accessibility

ParameterValueScoreCountWindowSource
Developer ExperienceDeveloper experience, 0 to 100: half CI run time, half setup signals.7070.030—primaryraw/actions_runs/containers__bubblewrap.json
Newcomer ConversionShare of first-time authors whose first pull request merged within 180 days.33.3%66.76—primaryraw/author_history/containers__bubblewrap.json
Newcomer Issue SupplyOpen, unassigned, up-to-date issues marked for newcomers.220.0——primaryraw/gfi/containers__bubblewrap.json
Newcomer Return RateShare of those merged first-time authors who sent a second pull request within 90 days.Not shown: Insufficient sample size

Persona view

PersonaRankScoreTierStatus
Balanced1,084 of 3,21954.57CRated
First-timer794 of 1,52556.04BRated
Career capitalThis repository's production-criticality signal is not yet high enough for career-capital ranking.
Senior systemsFewer than 3 organizations account for most commits (not multi-vendor).
AI-assisted1,172 of 3,69655.12BRated

Integrity

Snapshot
2026-10-17
Raw hash
be4cb1cfac27c41bd9f9c2e8a830d9fe0536a8c72bf8eb5b206cc76dd1dbcb6c

No suspicion flags on this repository.

The full record is in data/2026-10-17/repos/5e.json, under the key containers/bubblewrap.

How every number is measured: Porchlamp methodology.

Open an issue about this record and say what looks wrong.

Porchlamp (2026). containers/bubblewrap. Snapshot 2026-10-17. https://porchlamp.org/projects/containers/bubblewrap/. CC BY 4.0.

Similar projects

The ranked projects nearest this one in the same ecosystem.