PorchlampFind the projects that leave the light on.2026-10-17

What happens to a stranger's pull request here, in the Porchlamp snapshot of 17 October 2026.

For yshui/picom, the reply time and the share with no reply within 14 days both have too small a sample to measure (0 and 9 pull requests counted; 10 needed). It ranks 2,690 of 3,219 overall. It is not ranked for first-time contributors: not enough evidence to show under this lens.

Key facts
Rank2,690 of 3,219
Score40.02
TierC
Median first reply—
14-day no-reply share—
First-timer rankNot enough evidence to show under this lens.
EcosystemC and C++
Window—

Composite

Rank
2,690 of 3,219
Score
40.02
Tier
C
Coverage
63% · Ceiling B
Quadrant
Graveyard

Coordinates: leverage 39.1 (coverage 91%), friction 53.5 (coverage 40%)

Five pillars

Score out of 100, and how much of the pillar was measured
PillarScoreCoverage
Responsiveness—0%
Criticality35.4100%
Governance55.8100%
Rigor34.370%
Accessibility32.550%

The measured parameters

Responsiveness

ParameterValueScoreCountWindowSource
Decision Rate (90d)Share of outside pull requests that were merged or closed within 90 days.Not shown: Insufficient sample size
PR Ghost Rate (14d)Share of outside pull requests with no maintainer response, merge or close within 14 days.Not shown: Insufficient sample size
First-timer Merge RateShare of first-time outside authors' decided pull requests that were merged.Not shown: Insufficient sample size
Time to First ResponseMedian hours from an outside pull request opening to its first substantive human reply.Not shown: Insufficient sample size
Time to Merge (p90)Hours within which 90% of merged outside pull requests were merged.Not shown: Insufficient sample size

Criticality

ParameterValueScoreCountWindowSource
DependentsPackages in the registry that depend on this project, counted once each.Not shown: Not applicable
Monthly DownloadsDownloads from the package registry in a month.Not shown: Not applicable
OpenSSF CriticalityOpenSSF criticality score from 0 to 1, computed from the project's public activity signals.0.35435.4——proxy:no_dependents_signalraw/github_meta/yshui__picom.json

Governance

ParameterValueScoreCountWindowSource
Elephant FactorThe fewest organisations that account for half of the last year's commits.125.066—primaryraw/commits_365d/yshui__picom.json
Legal IP RegimeThe contributor licence regime: DCO, none, a foundation CLA or a corporate CLA.Sign-off on commits (DCO)100.0——primaryraw/governance/yshui__picom.json
Promotion LadderHow openly a contributor can become a maintainer, from closed to verified.No written path to becoming a maintainer40.0——primaryraw/governance/yshui__picom.json

Rigor

ParameterValueScoreCountWindowSource
AI Policy PostureWhether the project has a written policy on AI-assisted contributions.No written AI policy40.0——primaryraw/governance/yshui__picom.json
Pipeline DefensesHow well the project's build and review pipeline defends against bad changes, 0 to 100.3030.0——primaryraw/scorecard/yshui__picom.json
Substantive Review RateShare of decided pull requests that received a substantive review.Not shown: Insufficient sample size

Accessibility

ParameterValueScoreCountWindowSource
Developer ExperienceDeveloper experience, 0 to 100: half CI run time, half setup signals.8585.028—primaryraw/actions_runs/yshui__picom.json
Newcomer ConversionShare of first-time authors whose first pull request merged within 180 days.Not shown: Insufficient sample size
Newcomer Issue SupplyOpen, unassigned, up-to-date issues marked for newcomers.110.0——primaryraw/gfi/yshui__picom.json
Newcomer Return RateShare of those merged first-time authors who sent a second pull request within 90 days.Not shown: Insufficient sample size

Persona view

PersonaRankScoreTierStatus
Balanced2,690 of 3,21940.02CRated
First-timerNot enough evidence to show under this lens.
Career capitalThis repository's production-criticality signal is not yet high enough for career-capital ranking.
Senior systemsFewer than 3 organizations account for most commits (not multi-vendor).
AI-assisted3,225 of 3,69638.37DRated

Integrity

Snapshot
2026-10-17
Raw hash
bb373672e6e13dde685e93a4b92729604e373105f851ce5e93e3bf3b7231819b

No suspicion flags on this repository.

The full record is in data/2026-10-17/repos/59.json, under the key yshui/picom.

How every number is measured: Porchlamp methodology.

Open an issue about this record and say what looks wrong.

Porchlamp (2026). yshui/picom. Snapshot 2026-10-17. https://porchlamp.org/projects/yshui/picom/. CC BY 4.0.

Similar projects

The ranked projects nearest this one in the same ecosystem.