PorchlampFind the projects that leave the light on.2026-10-17

What happens to a stranger's pull request here, in the Porchlamp snapshot of 17 October 2026.

For shadow1ng/fscan, the reply time and the share with no reply within 14 days both have too small a sample to measure (0 and 4 pull requests counted; 10 needed). It ranks 2,930 of 3,219 overall. It is not ranked for first-time contributors: not enough evidence to show under this lens.

Key facts
Rank2,930 of 3,219
Score35.64
TierD
Median first reply—
14-day no-reply share—
First-timer rankNot enough evidence to show under this lens.
EcosystemGo
Window—

Composite

Rank
2,930 of 3,219
Score
35.64
Tier
D
Coverage
63% · Ceiling B
Quadrant
Graveyard

Coordinates: leverage 37.1 (coverage 91%), friction 61.3 (coverage 40%)

Five pillars

Score out of 100, and how much of the pillar was measured
PillarScoreCoverage
Responsiveness—0%
Criticality23.1100%
Governance50.5100%
Rigor51.470%
Accessibility21.050%

The measured parameters

Responsiveness

ParameterValueScoreCountWindowSource
Decision Rate (90d)Share of outside pull requests that were merged or closed within 90 days.Not shown: Insufficient sample size
PR Ghost Rate (14d)Share of outside pull requests with no maintainer response, merge or close within 14 days.Not shown: Insufficient sample size
First-timer Merge RateShare of first-time outside authors' decided pull requests that were merged.Not shown: Insufficient sample size
Time to First ResponseMedian hours from an outside pull request opening to its first substantive human reply.Not shown: Insufficient sample size
Time to Merge (p90)Hours within which 90% of merged outside pull requests were merged.Not shown: Insufficient sample size

Criticality

ParameterValueScoreCountWindowSource
DependentsPackages in the registry that depend on this project, counted once each.015.5——primaryraw/dependents/shadow1ng__fscan.json
Monthly DownloadsDownloads from the package registry in a month.Not shown: Not applicable
OpenSSF CriticalityOpenSSF criticality score from 0 to 1, computed from the project's public activity signals.0.317231.7——primaryraw/github_meta/shadow1ng__fscan.json

Governance

ParameterValueScoreCountWindowSource
Elephant FactorThe fewest organisations that account for half of the last year's commits.125.0186—primaryraw/commits_365d/shadow1ng__fscan.json
Legal IP RegimeThe contributor licence regime: DCO, none, a foundation CLA or a corporate CLA.No CLA or sign-off found85.0——primaryraw/governance/shadow1ng__fscan.json
Promotion LadderHow openly a contributor can become a maintainer, from closed to verified.No written path to becoming a maintainer40.0——primaryraw/governance/shadow1ng__fscan.json

Rigor

ParameterValueScoreCountWindowSource
AI Policy PostureWhether the project has a written policy on AI-assisted contributions.No written AI policy40.0——primaryraw/governance/shadow1ng__fscan.json
Pipeline DefensesHow well the project's build and review pipeline defends against bad changes, 0 to 100.6060.0——primaryraw/scorecard/shadow1ng__fscan.json
Substantive Review RateShare of decided pull requests that received a substantive review.Not shown: Insufficient sample size

Accessibility

ParameterValueScoreCountWindowSource
Developer ExperienceDeveloper experience, 0 to 100: half CI run time, half setup signals.7070.030—primaryraw/actions_runs/shadow1ng__fscan.json
Newcomer ConversionShare of first-time authors whose first pull request merged within 180 days.Not shown: Insufficient sample size
Newcomer Issue SupplyOpen, unassigned, up-to-date issues marked for newcomers.00.0——primaryraw/gfi/shadow1ng__fscan.json
Newcomer Return RateShare of those merged first-time authors who sent a second pull request within 90 days.Not shown: Insufficient sample size

Persona view

PersonaRankScoreTierStatus
Balanced2,930 of 3,21935.64DRated
First-timerNot enough evidence to show under this lens.
Career capitalThis repository's production-criticality signal is not yet high enough for career-capital ranking.
Senior systemsFewer than 3 organizations account for most commits (not multi-vendor).
AI-assisted3,072 of 3,69640.36CRated

Integrity

Snapshot
2026-10-17
Raw hash
6dd8aad4b08b6ae7e7d015b47a42cf7c1577d7e5fc706899de0d07f8e8ed1c00

No suspicion flags on this repository.

The full record is in data/2026-10-17/repos/11.json, under the key shadow1ng/fscan.

How every number is measured: Porchlamp methodology.

Open an issue about this record and say what looks wrong.

Porchlamp (2026). shadow1ng/fscan. Snapshot 2026-10-17. https://porchlamp.org/projects/shadow1ng/fscan/. CC BY 4.0.

Similar projects

The ranked projects nearest this one in the same ecosystem.