gchq/CyberChef
What happens to a stranger's pull request here, in the Porchlamp snapshot of 17 October 2026.
Outside pull requests to gchq/CyberChef got a first human reply in a median of 19.7 hours (244 pull requests, 18 April to 15 October 2026); 46% got none within 14 days. It ranks 551 of 3,219 overall. For first-time contributors it ranks 174 of 1,525 (the top 12%).
| Rank | 551 of 3,219 |
|---|---|
| Score | 59.43 |
| Tier | B |
| Median first reply | 19.7 hours |
| 14-day no-reply share | 46% |
| First-timer rank | 174 of 1,525 |
| Ecosystem | JavaScript |
| Window | 18 April to 15 October 2026 |
Composite
- Rank
- 551 of 3,219
- Score
- 59.43
- Tier
- B
- Coverage
- 88% · Ceiling A
- Quadrant
- Nursery
Coordinates: leverage 50.0 (coverage 100%), friction 33.2 (coverage 80%)
Five pillars
| Pillar | Score | Coverage |
|---|---|---|
| Responsiveness | 69.3 | 80% |
| Criticality | 31.8 | 100% |
| Governance | 55.8 | 100% |
| Rigor | 76.4 | 100% |
| Accessibility | 77.0 | 50% |
The measured parameters
Responsiveness
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| Decision Rate (90d)Share of outside pull requests that were merged or closed within 90 days. | 76.9% | 96.1 | 121 | 18 April to 17 July 2026 | primaryraw/pr_window/gchq__CyberChef.json |
| PR Ghost Rate (14d)Share of outside pull requests with no maintainer response, merge or close within 14 days. | 45.9% | 8.2 | 207 | 20 April to 17 October 2026 | primaryraw/pr_window/gchq__CyberChef.json |
| First-timer Merge RateShare of first-time outside authors' decided pull requests that were merged. | Not shown: Collector failure | ||||
| Time to First ResponseMedian hours from an outside pull request opening to its first substantive human reply. | 19.7 hours (0.8 days) | 82.0 | 244 | 18 April to 15 October 2026 | primaryraw/pr_window/gchq__CyberChef.json |
| Time to Merge (p90)Hours within which 90% of merged outside pull requests were merged. | 235.6 hours (9.8 days) | 55.8 | 199 | 18 April to 15 October 2026 | primaryraw/pr_window/gchq__CyberChef.json |
Criticality
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| DependentsPackages in the registry that depend on this project, counted once each. | 4 | 28.5 | — | — | primaryraw/dependents/gchq__CyberChef.json |
| Monthly DownloadsDownloads from the package registry in a month. | 10,057 downloads a month | 18.1 | — | — | primaryraw/downloads/npm__CyberChef.json |
| OpenSSF CriticalityOpenSSF criticality score from 0 to 1, computed from the project's public activity signals. | 0.454 | 45.4 | — | — | primaryraw/github_meta/gchq__CyberChef.json |
Governance
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| Elephant FactorThe fewest organisations that account for half of the last year's commits. | 6 | 100.0 | 217 | — | primaryraw/commits_365d/gchq__CyberChef.json |
| Legal IP RegimeThe contributor licence regime: DCO, none, a foundation CLA or a corporate CLA. | Company CLA | 25.0 | — | — | primaryraw/governance/gchq__CyberChef.json |
| Promotion LadderHow openly a contributor can become a maintainer, from closed to verified. | No written path to becoming a maintainer | 40.0 | — | — | primaryraw/governance/gchq__CyberChef.json |
Rigor
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| AI Policy PostureWhether the project has a written policy on AI-assisted contributions. | Written AI policy | 95.0 | — | — | primaryraw/governance/gchq__CyberChef.json |
| Pipeline DefensesHow well the project's build and review pipeline defends against bad changes, 0 to 100. | 80 | 80.0 | — | — | primaryraw/scorecard/gchq__CyberChef.json |
| Substantive Review RateShare of decided pull requests that received a substantive review. | 42.3% | 52.8 | 291 | 18 April to 15 October 2026 | primaryraw/pr_window/gchq__CyberChef.json |
Accessibility
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| Developer ExperienceDeveloper experience, 0 to 100: half CI run time, half setup signals. | 70 | 70.0 | 21 | — | primaryraw/actions_runs/gchq__CyberChef.json |
| Newcomer ConversionShare of first-time authors whose first pull request merged within 180 days. | Not shown: Collector failure | ||||
| Newcomer Issue SupplyOpen, unassigned, up-to-date issues marked for newcomers. | 8 | 80.0 | — | — | primaryraw/gfi/gchq__CyberChef.json |
| Newcomer Return RateShare of those merged first-time authors who sent a second pull request within 90 days. | Not shown: Collector failure | ||||
Persona view
| Persona | Rank | Score | Tier | Status |
|---|---|---|---|---|
| Balanced | 551 of 3,219 | 59.43 | B | Rated |
| First-timer | 174 of 1,525 | 66.54 | B (capped) | Rated |
| Career capital | This repository's production-criticality signal is not yet high enough for career-capital ranking. | |||
| Senior systems | 622 of 1,276 | 54.59 | C | Rated |
| AI-assisted | 395 of 3,696 | 63.01 | B | Rated |
Integrity
- Snapshot
- 2026-10-17
- Raw hash
- a8c593b99151bd4ea130d4b4fc03b473be41690e0751b605fd55eadee9e5bedf
No suspicion flags on this repository.
The full record is in data/2026-10-17/repos/ca.json, under the key gchq/CyberChef.
How every number is measured: Porchlamp methodology.
Open an issue about this record and say what looks wrong.
Porchlamp (2026). gchq/CyberChef. Snapshot 2026-10-17. https://porchlamp.org/projects/gchq/cyberchef/. CC BY 4.0.
Similar projects
The ranked projects nearest this one in the same ecosystem.
- James-Yu/LaTeX-Workshop (rank 542)
- elastic/elasticsearch-js (rank 546)
- Automattic/mongoose (rank 549)
- antvis/X6 (rank 554)
- jeffvli/feishin (rank 559)