Porchlamp's symbol: a porch lamp with its light on

Porchlamp

Find the projects that leave the light on.

A porch lamp left on tells a visitor they are expected. Porchlamp ranks open-source projects the same way: by what happens to a stranger's pull request, not by how many stars the project has.

Stars don't review pull requests

  • More than a third of active projects are black holes. Of the 4,358 licensed, maintained software projects that received at least ten outside pull requests in six months, 1,610 (36.9%) left most of them with no human reply, review or merge for two weeks. Counting only pull requests opened by people, not bots, gives 56.3%.
  • More stars, more silence. The black-hole share rises with popularity: 33% of projects with 1k–10k stars, 40% at 10k–50k, and 48% at 50k or more.
  • Stars barely predict the ranking. Across the 3,407 ranked projects the rank correlation between stars and the Porchlamp score is 0.13, and 9 of the 100 most-starred projects make the top 100.

Where the numbers come from

We followed 212,390 pull requests from 110,605 outside contributors to 11,000 projects over six months across npm (JavaScript/TypeScript), PyPI (Python), crates.io (Rust), Go, Maven (Java), and systems software: who got an answer, how fast, how many reached a decision, whether first-time contributors came back, and how much other software depends on each project. Black holes, and projects that are archived, unmaintained, unlicensed or not software, are listed but never ranked. Every number traces back to a recorded GitHub response and its content hash (by Rahul Kumar, pctablet505).

18 parameters across 5 pillars and 5 contributor personas

  • Responsiveness (25%): Time to First Response (TTFHR), Decision Rate (90d), First-timer Merge Rate, PR Ghost Rate (14d), and Time to Merge (p90).
  • Criticality (25%): Deduplicated Dependents, OpenSSF Criticality Score, and Monthly Registry Downloads.
  • Governance (20%): Legal IP Regime (OSI license & CLA/DCO), Elephant Factor, Promotion Ladder, and Bus Factor.
  • Rigor (15%): OpenSSF Scorecard Pipeline Defenses, AI Policy Posture, and Substantive Review Rate.
  • Accessibility (15%): Active Good First Issues, Newcomer Conversion, Newcomer Return Rate (90d), and Developer Experience.

Explore rankings by contributor lens: Balanced Leaderboard · Best Open-Source Projects for First-Timers · Career Capital · Senior Systems · AI-Assisted Contributors · Leverage vs. Friction Matrix · Full Methodology & Verification Hashes

Filter by language & package ecosystem: Python (PyPI) · JavaScript & TypeScript (npm) · Rust (crates.io) · Go · Java (Maven) · Systems (C/C++/Zig)

Top ranked open-source repositories (Balanced snapshot 2026-10-13c, 3,407 ranked of 11,000 evaluated)

RankRepositoryEcosystemPorchlamp ScoreQuadrant
1meshery/mesherynpm81.09Sweet Spot
2WordPress/gutenbergnpm80.80Sweet Spot
3ggml-org/llama.cppsystems80.78Sweet Spot
4rust-lang/rustcrates80.69Sweet Spot
5prometheus/prometheusgo79.11Sweet Spot
6servo/rust-smallveccrates78.98Sweet Spot
7kornia/korniapypi78.62Sweet Spot
8rust-lang/libccrates78.07Sweet Spot
9freeCodeCamp/freeCodeCampnpm77.50Sweet Spot
10ant-design/ant-designnpm77.49Sweet Spot
11kedacore/kedago77.00Sweet Spot
12external-secrets/external-secretsgo76.61Sweet Spot
13organicmaps/organicmapssystems76.39Sweet Spot
14webdriverio/webdriverionpm76.31Sweet Spot
15apache/airflowpypi76.09Sweet Spot
16onnx/onnxpypi75.87Sweet Spot
17matplotlib/matplotlibpypi75.83Sweet Spot
18kubernetes-sigs/cluster-apigo75.37Sweet Spot
19biomejs/biomecrates75.21Sweet Spot
20moby/mobygo74.85Sweet Spot