PorchlampFind the projects that leave the light on.2026-10-17

What happens to a stranger's pull request here, in the Porchlamp snapshot of 17 October 2026.

Outside pull requests to microsoft/msquic got a first human reply in a median of 26.7 hours (202 pull requests, 19 April to 16 October 2026); 8% got none within 14 days. It ranks 1,185 of 3,219 overall. For first-time contributors it ranks 934 of 1,525 (the bottom 39%).

Key facts
Rank1,185 of 3,219
Score53.77
TierC
Median first reply26.7 hours
14-day no-reply share8%
First-timer rank934 of 1,525
EcosystemC and C++
Window19 April to 16 October 2026

Composite

Rank
1,185 of 3,219
Score
53.77
Tier
C
Coverage
93% · Ceiling A
Quadrant
Sweet Spot

Coordinates: leverage 53.6 (coverage 100%), friction 46.5 (coverage 90%)

Five pillars

Score out of 100, and how much of the pillar was measured
PillarScoreCoverage
Responsiveness75.7100%
Criticality51.1100%
Governance29.5100%
Rigor73.7100%
Accessibility34.050%

The measured parameters

Responsiveness

ParameterValueScoreCountWindowSource
Decision Rate (90d)Share of outside pull requests that were merged or closed within 90 days.93.3%100.04519 April to 18 July 2026primaryraw/pr_window/microsoft__msquic.json
PR Ghost Rate (14d)Share of outside pull requests with no maintainer response, merge or close within 14 days.7.5%85.012020 April to 17 October 2026primaryraw/pr_window/microsoft__msquic.json
First-timer Merge RateShare of first-time outside authors' decided pull requests that were merged.43.8%54.716—primaryraw/author_history/microsoft__msquic.json
Time to First ResponseMedian hours from an outside pull request opening to its first substantive human reply.26.7 hours (1.1 days)71.120219 April to 16 October 2026primaryraw/pr_window/microsoft__msquic.json
Time to Merge (p90)Hours within which 90% of merged outside pull requests were merged.296.3 hours (12.3 days)57.117819 April to 16 October 2026primaryraw/pr_window/microsoft__msquic.json

Criticality

ParameterValueScoreCountWindowSource
DependentsPackages in the registry that depend on this project, counted once each.Not shown: Not applicable
Monthly DownloadsDownloads from the package registry in a month.Not shown: Not applicable
OpenSSF CriticalityOpenSSF criticality score from 0 to 1, computed from the project's public activity signals.0.511151.1——proxy:no_dependents_signalraw/github_meta/microsoft__msquic.json

Governance

ParameterValueScoreCountWindowSource
Elephant FactorThe fewest organisations that account for half of the last year's commits.125.0237—primaryraw/commits_365d/microsoft__msquic.json
Legal IP RegimeThe contributor licence regime: DCO, none, a foundation CLA or a corporate CLA.Company CLA25.0——primaryraw/governance/microsoft__msquic.json
Promotion LadderHow openly a contributor can become a maintainer, from closed to verified.No written path to becoming a maintainer40.0——primaryraw/governance/microsoft__msquic.json

Rigor

ParameterValueScoreCountWindowSource
AI Policy PostureWhether the project has a written policy on AI-assisted contributions.Written AI policy95.0——primaryraw/governance/microsoft__msquic.json
Pipeline DefensesHow well the project's build and review pipeline defends against bad changes, 0 to 100.9090.0——primaryraw/scorecard/microsoft__msquic.json
Substantive Review RateShare of decided pull requests that received a substantive review.24.6%30.820319 April to 16 October 2026primaryraw/pr_window/microsoft__msquic.json

Accessibility

ParameterValueScoreCountWindowSource
Developer ExperienceDeveloper experience, 0 to 100: half CI run time, half setup signals.2020.07—primaryraw/actions_runs/microsoft__msquic.json
Newcomer ConversionShare of first-time authors whose first pull request merged within 180 days.Not shown: Collector failure
Newcomer Issue SupplyOpen, unassigned, up-to-date issues marked for newcomers.440.0——primaryraw/gfi/microsoft__msquic.json
Newcomer Return RateShare of those merged first-time authors who sent a second pull request within 90 days.Not shown: Collector failure

Persona view

PersonaRankScoreTierStatus
Balanced1,185 of 3,21953.77CRated
First-timer934 of 1,52553.62CRated
Career capitalThis repository's production-criticality signal is not yet high enough for career-capital ranking.
Senior systemsFewer than 3 organizations account for most commits (not multi-vendor).
AI-assisted719 of 3,69659.00BRated

Integrity

Snapshot
2026-10-17
Raw hash
a3d49ab29f2acb72228def6db5645d1ab8c967dd8543696d48a1f718702f2644

No suspicion flags on this repository.

The full record is in data/2026-10-17/repos/6d.json, under the key microsoft/msquic.

How every number is measured: Porchlamp methodology.

Open an issue about this record and say what looks wrong.

Porchlamp (2026). microsoft/msquic. Snapshot 2026-10-17. https://porchlamp.org/projects/microsoft/msquic/. CC BY 4.0.

Similar projects

The ranked projects nearest this one in the same ecosystem.