expressjs/session
What happens to a stranger's pull request here, in the Porchlamp snapshot of 17 October 2026.
For expressjs/session, the reply time has too small a sample to measure (0 pull requests counted; 10 needed). 67% of 12 outside pull requests got no reply within 14 days (20 April to 17 October 2026). It ranks 1,977 of 3,219 overall. For first-time contributors it ranks 1,465 of 1,525 (the bottom 4%).
| Rank | 1,977 of 3,219 |
|---|---|
| Score | 47.38 |
| Tier | C |
| Median first reply | — |
| 14-day no-reply share | 67% |
| First-timer rank | 1,465 of 1,525 |
| Ecosystem | JavaScript |
| Window | 20 April to 17 October 2026 |
Composite
- Rank
- 1,977 of 3,219
- Score
- 47.38
- Tier
- C
- Coverage
- 72% · Ceiling B
- Quadrant
- Crucible
Coordinates: leverage 58.0 (coverage 93%), friction 59.0 (coverage 52%)
Five pillars
| Pillar | Score | Coverage |
|---|---|---|
| Responsiveness | 34.7 | 45% |
| Criticality | 68.8 | 100% |
| Governance | 64.2 | 65% |
| Rigor | 35.7 | 100% |
| Accessibility | 22.0 | 50% |
The measured parameters
Responsiveness
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| Decision Rate (90d)Share of outside pull requests that were merged or closed within 90 days. | Not shown: Insufficient sample size | ||||
| PR Ghost Rate (14d)Share of outside pull requests with no maintainer response, merge or close within 14 days. | 66.7% | 0.0 | 12 | 20 April to 17 October 2026 | primaryraw/pr_window/expressjs__session.json |
| First-timer Merge RateShare of first-time outside authors' decided pull requests that were merged. | 57.1% | 71.4 | 7 | — | primaryraw/author_history/expressjs__session.json |
| Time to First ResponseMedian hours from an outside pull request opening to its first substantive human reply. | Not shown: Insufficient sample size | ||||
| Time to Merge (p90)Hours within which 90% of merged outside pull requests were merged. | 879.5 hours (36.6 days) | 13.1 | 7 | 19 April to 16 October 2026 | primaryraw/pr_window/expressjs__session.json |
Criticality
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| DependentsPackages in the registry that depend on this project, counted once each. | 5,141 | 87.3 | — | — | primaryraw/dependents/expressjs__session.json |
| Monthly DownloadsDownloads from the package registry in a month. | 19.9 million downloads a month | 74.9 | — | — | primaryraw/downloads/npm__session.json |
| OpenSSF CriticalityOpenSSF criticality score from 0 to 1, computed from the project's public activity signals. | 0.434 | 43.4 | — | — | primaryraw/github_meta/expressjs__session.json |
Governance
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| Elephant FactorThe fewest organisations that account for half of the last year's commits. | Not shown: Insufficient sample size | ||||
| Legal IP RegimeThe contributor licence regime: DCO, none, a foundation CLA or a corporate CLA. | No CLA or sign-off found | 85.0 | — | — | primaryraw/governance/expressjs__session.json |
| Promotion LadderHow openly a contributor can become a maintainer, from closed to verified. | No written path to becoming a maintainer | 40.0 | — | — | primaryraw/governance/expressjs__session.json |
Rigor
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| AI Policy PostureWhether the project has a written policy on AI-assisted contributions. | No written AI policy | 40.0 | — | — | primaryraw/governance/expressjs__session.json |
| Pipeline DefensesHow well the project's build and review pipeline defends against bad changes, 0 to 100. | 54 | 54.0 | — | — | primaryraw/scorecard/expressjs__session.json |
| Substantive Review RateShare of decided pull requests that received a substantive review. | 5.6% | 6.9 | 18 | 19 April to 16 October 2026 | primaryraw/pr_window/expressjs__session.json |
Accessibility
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| Developer ExperienceDeveloper experience, 0 to 100: half CI run time, half setup signals. | 50 | 50.0 | 30 | — | primaryraw/actions_runs/expressjs__session.json |
| Newcomer ConversionShare of first-time authors whose first pull request merged within 180 days. | Not shown: Insufficient sample size | ||||
| Newcomer Issue SupplyOpen, unassigned, up-to-date issues marked for newcomers. | 1 | 10.0 | — | — | primaryraw/gfi/expressjs__session.json |
| Newcomer Return RateShare of those merged first-time authors who sent a second pull request within 90 days. | Not shown: Insufficient sample size | ||||
Persona view
| Persona | Rank | Score | Tier | Status |
|---|---|---|---|---|
| Balanced | 1,977 of 3,219 | 47.38 | C | Rated |
| First-timer | 1,465 of 1,525 | 38.82 | D | Rated |
| Career capital | 695 of 798 | 48.63 | C | Rated |
| Senior systems | 671 of 1,276 | 53.59 | C | Rated |
| AI-assisted | 2,550 of 3,696 | 45.03 | C | Rated |
Integrity
- Snapshot
- 2026-10-17
- Raw hash
- 8110c8d5f4ca8f5fc319f999eb2d662f45a557a016aa4a01aa6db1b8a5448907
No suspicion flags on this repository.
The full record is in data/2026-10-17/repos/ef.json, under the key expressjs/session.
How every number is measured: Porchlamp methodology.
Open an issue about this record and say what looks wrong.
Porchlamp (2026). expressjs/session. Snapshot 2026-10-17. https://porchlamp.org/projects/expressjs/session/. CC BY 4.0.
Similar projects
The ranked projects nearest this one in the same ecosystem.
- googleapis/google-api-nodejs-client (rank 1,973)
- caolan/async (rank 1,975)
- exa-labs/exa-mcp-server (rank 1,978)
- josdejong/mathjs (rank 1,979)
- gitpod-io/gitpod (rank 1,980)