PorchlampFind the projects that leave the light on.2026-10-17

What happens to a stranger's pull request here, in the Porchlamp snapshot of 17 October 2026.

For xvzc/spoofdpi, the reply time and the share with no reply within 14 days both have too small a sample to measure (0 and 7 pull requests counted; 10 needed). It ranks 2,251 of 3,219 overall. It is not ranked for first-time contributors: this repository does not show a low enough barrier for a first-time contributor.

Key facts
Rank2,251 of 3,219
Score44.86
TierC
Median first reply—
14-day no-reply share—
First-timer rankThis repository does not show a low enough barrier for a first-time contributor.
EcosystemGo
Window—

Composite

Rank
2,251 of 3,219
Score
44.86
Tier
C
Coverage
80% · Ceiling A
Quadrant
Nursery

Coordinates: leverage 36.3 (coverage 100%), friction 46.1 (coverage 62%)

Five pillars

Score out of 100, and how much of the pillar was measured
PillarScoreCoverage
Responsiveness59.530%
Criticality25.1100%
Governance50.5100%
Rigor45.6100%
Accessibility45.385%

The measured parameters

Responsiveness

ParameterValueScoreCountWindowSource
Decision Rate (90d)Share of outside pull requests that were merged or closed within 90 days.Not shown: Insufficient sample size
PR Ghost Rate (14d)Share of outside pull requests with no maintainer response, merge or close within 14 days.Not shown: Insufficient sample size
First-timer Merge RateShare of first-time outside authors' decided pull requests that were merged.33.3%41.76—primaryraw/author_history/xvzc__spoofdpi.json
Time to First ResponseMedian hours from an outside pull request opening to its first substantive human reply.Not shown: Insufficient sample size
Time to Merge (p90)Hours within which 90% of merged outside pull requests were merged.20.8 hours (0.9 days)95.11319 April to 16 October 2026primaryraw/pr_window/xvzc__spoofdpi.json

Criticality

ParameterValueScoreCountWindowSource
DependentsPackages in the registry that depend on this project, counted once each.015.5——primaryraw/dependents/xvzc__spoofdpi.json
Monthly DownloadsDownloads from the package registry in a month.Not shown: Not applicable
OpenSSF CriticalityOpenSSF criticality score from 0 to 1, computed from the project's public activity signals.0.359936.0——primaryraw/github_meta/xvzc__spoofdpi.json

Governance

ParameterValueScoreCountWindowSource
Elephant FactorThe fewest organisations that account for half of the last year's commits.125.0186—primaryraw/commits_365d/xvzc__spoofdpi.json
Legal IP RegimeThe contributor licence regime: DCO, none, a foundation CLA or a corporate CLA.No CLA or sign-off found85.0——primaryraw/governance/xvzc__spoofdpi.json
Promotion LadderHow openly a contributor can become a maintainer, from closed to verified.No written path to becoming a maintainer40.0——primaryraw/governance/xvzc__spoofdpi.json

Rigor

ParameterValueScoreCountWindowSource
AI Policy PostureWhether the project has a written policy on AI-assisted contributions.Written AI policy95.0——primaryraw/governance/xvzc__spoofdpi.json
Pipeline DefensesHow well the project's build and review pipeline defends against bad changes, 0 to 100.42.727342.722—proxy:review_ciraw/pr_window/xvzc__spoofdpi.json
Substantive Review RateShare of decided pull requests that received a substantive review.0.0%0.01619 April to 16 October 2026primaryraw/pr_window/xvzc__spoofdpi.json

Accessibility

ParameterValueScoreCountWindowSource
Developer ExperienceDeveloper experience, 0 to 100: half CI run time, half setup signals.7070.030—primaryraw/actions_runs/xvzc__spoofdpi.json
Newcomer ConversionShare of first-time authors whose first pull request merged within 180 days.40.0%80.05—primaryraw/author_history/xvzc__spoofdpi.json
Newcomer Issue SupplyOpen, unassigned, up-to-date issues marked for newcomers.00.0——primaryraw/gfi/xvzc__spoofdpi.json
Newcomer Return RateShare of those merged first-time authors who sent a second pull request within 90 days.Not shown: Insufficient sample size

Persona view

PersonaRankScoreTierStatus
Balanced2,251 of 3,21944.86CRated
First-timerThis repository does not show a low enough barrier for a first-time contributor.
Career capitalThis repository's production-criticality signal is not yet high enough for career-capital ranking.
Senior systemsFewer than 3 organizations account for most commits (not multi-vendor).
AI-assisted2,558 of 3,69644.96CRated

Integrity

Snapshot
2026-10-17
Raw hash
760d33ec19a4650ce3a5ec0f508af6aa455d8207ea10c0551b1ebcaf0518de98

No suspicion flags on this repository.

The full record is in data/2026-10-17/repos/f2.json, under the key xvzc/spoofdpi.

How every number is measured: Porchlamp methodology.

Open an issue about this record and say what looks wrong.

Porchlamp (2026). xvzc/spoofdpi. Snapshot 2026-10-17. https://porchlamp.org/projects/xvzc/spoofdpi/. CC BY 4.0.

Similar projects

The ranked projects nearest this one in the same ecosystem.