mvdan/sh
What happens to a stranger's pull request here, in the Porchlamp snapshot of 14 October 2026.
Outside pull requests to sh got a first human reply in a median of 6.4 hours (50 pull requests, 10 April to 7 October 2026); 22% got none within 14 days. It ranks 537 of 3,833 overall. It is not ranked for first-time contributors: this repository does not show a low enough barrier for a first-time contributor.
Rating
- Score: 62.47
- Coverage: 100% · Full
- Tier: B
- Quadrant: Sweet Spot
- Ecosystem: Go
Five pillars
| Pillar | Score | Coverage |
|---|---|---|
| Responsiveness | 77.3 | 100% |
| Criticality | 64.8 | 100% |
| Governance | 50.5 | 100% |
| Rigor | 54.8 | 100% |
| Accessibility | 57.6 | 100% |
Rank in each lens
| Lens | Standing |
|---|---|
| Balanced | Rank 537 of 3,833 |
| First-timer | Not ranked: This repository does not show a low enough barrier for a first-time contributor. |
| Career capital | Rank 260 of 823 |
| Senior systems | Not ranked: Fewer than 3 organizations account for most commits (not multi-vendor). |
| AI-assisted | Rank 664 of 3,929 |
The measured parameters
| Parameter | Value | Count | Window | What it measures |
|---|---|---|---|---|
| Time to First Response | 6.361 | 50 | 10 April to 7 October 2026 | Median hours from an outside pull request opening to its first substantive human reply. |
| Decision Rate (90d) | 1 | 15 | 10 April to 9 July 2026 | Share of outside pull requests that were merged or closed within 90 days. |
| First-timer Merge Rate | 0.2963 | 27 | — | Share of first-time outside authors' decided pull requests that were merged. |
| PR Ghost Rate (14d) | 0.2182 | 55 | 16 April to 13 October 2026 | Share of outside pull requests with no maintainer response, merge or close within 14 days. |
| Time to Merge (p90) | 188.6456 | 13 | 10 April to 7 October 2026 | Hours within which 90% of merged outside pull requests were merged. |
| Dependents | 327 | — | — | Packages in the registry that depend on this project, counted once each. |
| OpenSSF Criticality | 0.4905 | — | — | OpenSSF criticality score from 0 to 1, computed from the project's public activity signals. |
| Monthly Downloads | Not shown: Not applicable | — | — | Downloads from the package registry in a month. |
| Legal IP Regime | NONE | — | — | The contributor licence regime: DCO, none, a foundation CLA or a corporate CLA. |
| Elephant Factor | 1 | 472 | — | The fewest organisations that account for half of the last year's commits. |
| Promotion Ladder | AD_HOC | — | — | How openly a contributor can become a maintainer, from closed to verified. |
| Pipeline Defenses | 57.5 | — | — | How well the project's build and review pipeline defends against bad changes, 0 to 100. |
| AI Policy Posture | REGULATED | — | — | Whether the project has a written policy on AI-assisted contributions. |
| Substantive Review Rate | 0.0893 | 56 | 10 April to 7 October 2026 | Share of decided pull requests that received a substantive review. |
| Newcomer Issue Supply | 2 | — | — | Open, unassigned, up-to-date issues marked for newcomers. |
| Newcomer Conversion | 0.4545 | 11 | — | Share of first-time authors whose first pull request merged within 180 days. |
| Newcomer Return Rate | 0.2 | 5 | — | Share of those merged first-time authors who sent a second pull request within 90 days. |
| Developer Experience | 85 | 30 | — | Developer experience, 0 to 100: half CI run time, half setup signals. |
Similar projects
The ranked projects nearest this one in the same ecosystem.
- googleapis/google-cloud-go (rank 513)
- caddyserver/certmagic (rank 526)
- kubernetes/minikube (rank 550)
- jackc/pgx (rank 551)
- hashicorp/nomad (rank 552)
Evidence
- Snapshot 2026-10-14, data as of 13 October 2026.
- Record hash:
4177bea20373fba022dcae2d6ac63da6f5e299870ac8114b048e0d7b00a011f9 - The full record is in data/2026-10-14/repos/6b.json, under the key
mvdan/sh. - How every number is measured: Porchlamp methodology.
Is something wrong?
Open an issue about this record and say what looks wrong.