zloirock/core-js
What happens to a stranger's pull request here, in the Porchlamp snapshot of 17 October 2026.
For zloirock/core-js, the reply time and the share with no reply within 14 days both have too small a sample to measure (0 and 6 pull requests counted; 10 needed). It ranks 664 of 3,219 overall. It is not ranked for first-time contributors: not enough evidence to show under this lens.
| Rank | 664 of 3,219 |
|---|---|
| Score | 58.20 |
| Tier | B (capped) |
| Median first reply | — |
| 14-day no-reply share | — |
| First-timer rank | Not enough evidence to show under this lens. |
| Ecosystem | JavaScript |
| Window | — |
Composite
- Rank
- 664 of 3,219
- Score
- 58.20
- Tier
- B (capped)
- Coverage
- 71% · Ceiling B
- Quadrant
- Sweet Spot
Coordinates: leverage 64.4 (coverage 91%), friction 44.9 (coverage 52%)
Capped: this tier can go no higher until more of the project's inputs are measured. It reflects how much data there is, not how good the score is.
Five pillars
| Pillar | Score | Coverage |
|---|---|---|
| Responsiveness | 71.8 | 10% |
| Criticality | 82.0 | 100% |
| Governance | 50.5 | 100% |
| Rigor | 44.3 | 70% |
| Accessibility | 20.0 | 85% |
The measured parameters
Responsiveness
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| Decision Rate (90d)Share of outside pull requests that were merged or closed within 90 days. | Not shown: Insufficient sample size | ||||
| PR Ghost Rate (14d)Share of outside pull requests with no maintainer response, merge or close within 14 days. | Not shown: Insufficient sample size | ||||
| First-timer Merge RateShare of first-time outside authors' decided pull requests that were merged. | Not shown: Insufficient sample size | ||||
| Time to First ResponseMedian hours from an outside pull request opening to its first substantive human reply. | Not shown: Insufficient sample size | ||||
| Time to Merge (p90)Hours within which 90% of merged outside pull requests were merged. | 138.2 hours (5.8 days) | 71.8 | 5 | 18 April to 15 October 2026 | primaryraw/pr_window/zloirock__core-js.json |
Criticality
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| DependentsPackages in the registry that depend on this project, counted once each. | 68,956 | 97.7 | — | — | primaryraw/dependents/zloirock__core-js.json |
| Monthly DownloadsDownloads from the package registry in a month. | 297.0 million downloads a month | 94.8 | — | — | primaryraw/downloads/npm__core-js.json |
| OpenSSF CriticalityOpenSSF criticality score from 0 to 1, computed from the project's public activity signals. | 0.5486 | 54.9 | — | — | primaryraw/github_meta/zloirock__core-js.json |
Governance
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| Elephant FactorThe fewest organisations that account for half of the last year's commits. | 1 | 25.0 | 768 | — | primaryraw/commits_365d/zloirock__core-js.json |
| Legal IP RegimeThe contributor licence regime: DCO, none, a foundation CLA or a corporate CLA. | No CLA or sign-off found | 85.0 | — | — | primaryraw/governance/zloirock__core-js.json |
| Promotion LadderHow openly a contributor can become a maintainer, from closed to verified. | No written path to becoming a maintainer | 40.0 | — | — | primaryraw/governance/zloirock__core-js.json |
Rigor
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| AI Policy PostureWhether the project has a written policy on AI-assisted contributions. | No written AI policy | 40.0 | — | — | primaryraw/governance/zloirock__core-js.json |
| Pipeline DefensesHow well the project's build and review pipeline defends against bad changes, 0 to 100. | 47.5 | 47.5 | — | — | primaryraw/scorecard/zloirock__core-js.json |
| Substantive Review RateShare of decided pull requests that received a substantive review. | Not shown: Insufficient sample size | ||||
Accessibility
| Parameter | Value | Score | Count | Window | Source |
|---|---|---|---|---|---|
| Developer ExperienceDeveloper experience, 0 to 100: half CI run time, half setup signals. | 20 | 20.0 | 30 | — | primaryraw/actions_runs/zloirock__core-js.json |
| Newcomer ConversionShare of first-time authors whose first pull request merged within 180 days. | 20.0% | 40.0 | 5 | — | primaryraw/author_history/zloirock__core-js.json |
| Newcomer Issue SupplyOpen, unassigned, up-to-date issues marked for newcomers. | 0 | 0.0 | — | — | primaryraw/gfi/zloirock__core-js.json |
| Newcomer Return RateShare of those merged first-time authors who sent a second pull request within 90 days. | Not shown: Insufficient sample size | ||||
Persona view
| Persona | Rank | Score | Tier | Status |
|---|---|---|---|---|
| Balanced | 664 of 3,219 | 58.20 | B (capped) | Rated |
| First-timer | Not enough evidence to show under this lens. | |||
| Career capital | 373 of 798 | 59.06 | B (capped) | Rated |
| Senior systems | Fewer than 3 organizations account for most commits (not multi-vendor). | |||
| AI-assisted | 1,078 of 3,696 | 55.84 | B (capped) | Rated |
Integrity
- Snapshot
- 2026-10-17
- Raw hash
- cd311c76604915563ee1aeada5a4220538cec50f62fbf67ed68bc7537bbdea0e
No suspicion flags on this repository.
The full record is in data/2026-10-17/repos/01.json, under the key zloirock/core-js.
How every number is measured: Porchlamp methodology.
Open an issue about this record and say what looks wrong.
Porchlamp (2026). zloirock/core-js. Snapshot 2026-10-17. https://porchlamp.org/projects/zloirock/core-js/. CC BY 4.0.
Similar projects
The ranked projects nearest this one in the same ecosystem.
- chakra-ui/ark (rank 654)
- tailwindlabs/tailwindcss (rank 662)
- SBoudrias/Inquirer.js (rank 666)
- vuejs/language-tools (rank 669)
- vanilla-extract-css/vanilla-extract (rank 670)