PorchlampFind the projects that leave the light on.2026-10-17

What happens to a stranger's pull request here, in the Porchlamp snapshot of 17 October 2026.

For pypa/pipenv, the reply time and the share with no reply within 14 days both have too small a sample to measure (0 and 7 pull requests counted; 10 needed). It ranks 903 of 3,219 overall. For first-time contributors it ranks 753 of 1,525 (the top 50%).

Key facts
Rank903 of 3,219
Score56.10
TierB
Median first reply—
14-day no-reply share—
First-timer rank753 of 1,525
EcosystemPython
Window—

Composite

Rank
903 of 3,219
Score
56.10
Tier
B
Coverage
83% · Ceiling A
Quadrant
Sweet Spot

Coordinates: leverage 50.9 (coverage 100%), friction 37.7 (coverage 65%)

Five pillars

Score out of 100, and how much of the pillar was measured
PillarScoreCoverage
Responsiveness78.230%
Criticality61.2100%
Governance50.5100%
Rigor34.0100%
Accessibility40.3100%

The measured parameters

Responsiveness

ParameterValueScoreCountWindowSource
Decision Rate (90d)Share of outside pull requests that were merged or closed within 90 days.Not shown: Insufficient sample size
PR Ghost Rate (14d)Share of outside pull requests with no maintainer response, merge or close within 14 days.Not shown: Insufficient sample size
First-timer Merge RateShare of first-time outside authors' decided pull requests that were merged.71.4%89.37—primaryraw/author_history/pypa__pipenv.json
Time to First ResponseMedian hours from an outside pull request opening to its first substantive human reply.Not shown: Insufficient sample size
Time to Merge (p90)Hours within which 90% of merged outside pull requests were merged.287.2 hours (12 days)56.02218 April to 15 October 2026primaryraw/pr_window/pypa__pipenv.json

Criticality

ParameterValueScoreCountWindowSource
DependentsPackages in the registry that depend on this project, counted once each.4465.2——primaryraw/dependents/pypa__pipenv.json
Monthly DownloadsDownloads from the package registry in a month.8.0 million downloads a month77.6——primaryraw/downloads/pypi__pipenv.json
OpenSSF CriticalityOpenSSF criticality score from 0 to 1, computed from the project's public activity signals.0.450645.1——primaryraw/github_meta/pypa__pipenv.json

Governance

ParameterValueScoreCountWindowSource
Elephant FactorThe fewest organisations that account for half of the last year's commits.125.0699—primaryraw/commits_365d/pypa__pipenv.json
Legal IP RegimeThe contributor licence regime: DCO, none, a foundation CLA or a corporate CLA.No CLA or sign-off found85.0——primaryraw/governance/pypa__pipenv.json
Promotion LadderHow openly a contributor can become a maintainer, from closed to verified.No written path to becoming a maintainer40.0——primaryraw/governance/pypa__pipenv.json

Rigor

ParameterValueScoreCountWindowSource
AI Policy PostureWhether the project has a written policy on AI-assisted contributions.No written AI policy40.0——primaryraw/governance/pypa__pipenv.json
Pipeline DefensesHow well the project's build and review pipeline defends against bad changes, 0 to 100.5555.0——primaryraw/scorecard/pypa__pipenv.json
Substantive Review RateShare of decided pull requests that received a substantive review.0.0%0.02318 April to 15 October 2026primaryraw/pr_window/pypa__pipenv.json

Accessibility

ParameterValueScoreCountWindowSource
Developer ExperienceDeveloper experience, 0 to 100: half CI run time, half setup signals.3535.030—primaryraw/actions_runs/pypa__pipenv.json
Newcomer ConversionShare of first-time authors whose first pull request merged within 180 days.85.7%100.07—primaryraw/author_history/pypa__pipenv.json
Newcomer Issue SupplyOpen, unassigned, up-to-date issues marked for newcomers.00.0——primaryraw/gfi/pypa__pipenv.json
Newcomer Return RateShare of those merged first-time authors who sent a second pull request within 90 days.0.0%0.06—primaryraw/author_history/pypa__pipenv.json

Persona view

PersonaRankScoreTierStatus
Balanced903 of 3,21956.10BRated
First-timer753 of 1,52556.54B (capped)Rated
Career capital487 of 79856.10BRated
Senior systemsFewer than 3 organizations account for most commits (not multi-vendor).
AI-assisted1,666 of 3,69651.39CRated

Integrity

Snapshot
2026-10-17
Raw hash
025a5ba7a779ee9c44b6ce6ea75c6105b757b4248e3b65e6d4d9fb2347ae0b11

No suspicion flags on this repository.

The full record is in data/2026-10-17/repos/2a.json, under the key pypa/pipenv.

How every number is measured: Porchlamp methodology.

Open an issue about this record and say what looks wrong.

Porchlamp (2026). pypa/pipenv. Snapshot 2026-10-17. https://porchlamp.org/projects/pypa/pipenv/. CC BY 4.0.

Similar projects

The ranked projects nearest this one in the same ecosystem.