pypa/hatch
What happens to a stranger's pull request here, in the Porchlamp snapshot of 17 October 2026.
Outside pull requests to pypa/hatch got a first human reply in a median of 3.3 days (75 pull requests, 19 April to 16 October 2026); 44% got none within 14 days. It ranks 1,422 of 3,219 overall. It is not ranked for first-time contributors: this repository does not show a low enough barrier for a first-time contributor.
| Rank | 1,422 of 3,219 |
|---|---|
| Score | 51.87 |
| Tier | C |
| Median first reply | 3.3 days (80.0 hours) |
| 14-day no-reply share | 44% |
| First-timer rank | This repository does not show a low enough barrier for a first-time contributor. |
| Ecosystem | Python |
| Window | 19 April to 16 October 2026 |
Composite
- Rank
- 1,422 of 3,219
- Score
- 51.87
- Tier
- C
- Coverage
- 100% · Full
- Quadrant
- Crucible
Coordinates: leverage 58.8 (coverage 100%), friction 53.2 (coverage 100%)
Five pillars
| Pillar | Score | Coverage |
|---|---|---|
| Responsiveness | 41.6 | 100% |
| Criticality | 69.3 | 100% |
| Governance | 59.3 | 100% |
| Rigor | 41.0 | 100% |
| Accessibility | 40.9 | 100% |
The measured parameters
Responsiveness
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| Decision Rate (90d)Share of outside pull requests that were merged or closed within 90 days. | 63.4% | 79.3 | 41 | 19 April to 18 July 2026 | primaryraw/pr_window/pypa__hatch.json |
| PR Ghost Rate (14d)Share of outside pull requests with no maintainer response, merge or close within 14 days. | 44.0% | 12.1 | 91 | 20 April to 17 October 2026 | primaryraw/pr_window/pypa__hatch.json |
| First-timer Merge RateShare of first-time outside authors' decided pull requests that were merged. | 27.6% | 34.5 | 29 | — | primaryraw/author_history/pypa__hatch.json |
| Time to First ResponseMedian hours from an outside pull request opening to its first substantive human reply. | 80.0 hours (3.3 days) | 31.6 | 75 | 19 April to 16 October 2026 | primaryraw/pr_window/pypa__hatch.json |
| Time to Merge (p90)Hours within which 90% of merged outside pull requests were merged. | 473.9 hours (19.7 days) | 36.5 | 20 | 19 April to 16 October 2026 | primaryraw/pr_window/pypa__hatch.json |
Criticality
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| DependentsPackages in the registry that depend on this project, counted once each. | 252 | 82.1 | — | — | primaryraw/dependents/pypa__hatch.json |
| Monthly DownloadsDownloads from the package registry in a month. | 7.2 million downloads a month | 77.2 | — | — | primaryraw/downloads/pypi__hatch.json |
| OpenSSF CriticalityOpenSSF criticality score from 0 to 1, computed from the project's public activity signals. | 0.4915 | 49.1 | — | — | primaryraw/github_meta/pypa__hatch.json |
Governance
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| Elephant FactorThe fewest organisations that account for half of the last year's commits. | 2 | 50.0 | 120 | — | primaryraw/commits_365d/pypa__hatch.json |
| Legal IP RegimeThe contributor licence regime: DCO, none, a foundation CLA or a corporate CLA. | No CLA or sign-off found | 85.0 | — | — | primaryraw/governance/pypa__hatch.json |
| Promotion LadderHow openly a contributor can become a maintainer, from closed to verified. | No written path to becoming a maintainer | 40.0 | — | — | primaryraw/governance/pypa__hatch.json |
Rigor
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| AI Policy PostureWhether the project has a written policy on AI-assisted contributions. | No written AI policy | 40.0 | — | — | primaryraw/governance/pypa__hatch.json |
| Pipeline DefensesHow well the project's build and review pipeline defends against bad changes, 0 to 100. | 62.5 | 62.5 | — | — | primaryraw/scorecard/pypa__hatch.json |
| Substantive Review RateShare of decided pull requests that received a substantive review. | 10.6% | 13.3 | 66 | 19 April to 16 October 2026 | primaryraw/pr_window/pypa__hatch.json |
Accessibility
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| Developer ExperienceDeveloper experience, 0 to 100: half CI run time, half setup signals. | 70 | 70.0 | 10 | — | primaryraw/actions_runs/pypa__hatch.json |
| Newcomer ConversionShare of first-time authors whose first pull request merged within 180 days. | 31.3% | 62.5 | 16 | — | primaryraw/author_history/pypa__hatch.json |
| Newcomer Issue SupplyOpen, unassigned, up-to-date issues marked for newcomers. | 1 | 10.0 | — | — | primaryraw/gfi/pypa__hatch.json |
| Newcomer Return RateShare of those merged first-time authors who sent a second pull request within 90 days. | 16.7% | 33.3 | 6 | — | primaryraw/author_history/pypa__hatch.json |
Persona view
| Persona | Rank | Score | Tier | Status |
|---|---|---|---|---|
| Balanced | 1,422 of 3,219 | 51.87 | C | Rated |
| First-timer | This repository does not show a low enough barrier for a first-time contributor. | |||
| Career capital | 559 of 798 | 53.75 | C | Rated |
| Senior systems | Fewer than 3 organizations account for most commits (not multi-vendor). | |||
| AI-assisted | 1,941 of 3,696 | 49.51 | C | Rated |
Integrity
- Snapshot
- 2026-10-17
- Raw hash
- 5d3ec46b72a7f5a2ba4c036b9e5ee8a3aded24ceac331174ffe91cdcd82a9c0e
No suspicion flags on this repository.
The full record is in data/2026-10-17/repos/0c.json, under the key pypa/hatch.
How every number is measured: Porchlamp methodology.
Open an issue about this record and say what looks wrong.
Porchlamp (2026). pypa/hatch. Snapshot 2026-10-17. https://porchlamp.org/projects/pypa/hatch/. CC BY 4.0.
Similar projects
The ranked projects nearest this one in the same ecosystem.
- r0x0r/pywebview (rank 1,416)
- jacobgil/pytorch-grad-cam (rank 1,417)
- tensorflow/datasets (rank 1,419)
- amazon-science/chronos-forecasting (rank 1,421)
- lra/mackup (rank 1,427)