C-Rank Grade: A (Welcoming) - 58/100
External PR Merge Rate: 61%
Response Time: 21h
First Timer Success: 50%
OWASP/OpenCRE has a recorded first-timer success rate of 50.0%. Repositories ranked A typically provide actionable feedback during code reviews and actively nurture new community contributors.
Maintainers in OWASP/OpenCRE respond to incoming external pull requests in approximately 21.5 hours on average. Keeping PRs focused on single tasks and ensuring tests pass helps maintainers review faster.
The C-Rank™ system evaluates GitHub projects on a 0–100 scale using real data: PR merge rates, review turnaround time, active maintainer presence, and first-time contributor success. A score of 57.6 places OWASP/OpenCRE in the A tier.
The external contributor pull request merge rate for OWASP/OpenCRE is 61.1%, based on public PR activity from non-core contributors.
OWASP/OpenCRE does not currently have active "good first issue" tags indexed, but accepts external contributions through standard GitHub issue tracking.
Balanced & professional review environment in OWASP/OpenCRE. Maintains strict focus on technical quality and test standards.
Average Response Latency
Tracks hours until a maintainer leaves a review, comment, or PR response.
External Acceptance Rate
Percentage of community pull requests successfully merged into main.
First PR Conversion
Rate at which developers submitting their first repository PR succeed.
Show contributors that your repository actively reviews and merges external pull requests.
[](https://getmerged.abhishekco.de/OWASP/OpenCRE?utm_source=github&utm_medium=badge)
Historical health & responsiveness evolution
External PR acceptance
First PR success rate
50% receive response in
90% receive response in
Maintainer review activity heatmap & prime window prediction
Calculating local time...
Calculating local time...
Detected: UTC
Maintainers are most responsive around 21:00 UTC (21:00 UTC in your timezone). Recommended submission window is Wednesday - Friday from 20:00 to 00:00 UTC (20:00 - 00:00 UTC local).
Maintainer Strategy: Maintainer Sweet Spot: PRs under 150 lines merge in ~14 hours (76% approval). Large PRs (>500 lines) take ~103 hours (27% approval). Keep your diff compact for rapid review.
Issue What is the issue? Add an MCP (Model Context Protocol) server for OpenCRE that exposes the same capabilities as the existing REST API (/rest/v1/..., documented in docs/api/openapi.yaml), with identical authentication and authorisation requirements. Agents and IDEs should be able to call OpenCRE through MCP the same way clients call REST today — including authenticated surfaces such as MyOpenCRE (GET/PUT /rest/v1/user/resources), chat completion (POST /rest/v1/completion), and any other @login_required / feature-flagged routes — without a weaker or parallel auth model. Expected Behaviour Capability parity MCP tools (and resources/prompts where appropriate) map 1:1 (or via a thin, documented mapping) to OpenAPI operations under /rest/v1. Public endpoints remain callable without login (same as REST). Protected endpoints require the same login / feature gates as REST, e.g.: MyOpenCRE: CRE_ENABLE_LOGIN + CRE_ENABLE_MYOPENCRE + authenticated session (login_required) for /rest/v
Goal Consolidate frontend E2E from Jest/Puppeteer to Cypress; keep Python Playwright for backend/embeddings E2E (separate concern). Context Frontend browser E2E is effectively dead on main today: yarn test:e2e runs Jest (package.json), but application/frontend/src/test/basic-e2e.test.ts is fully commented out (legacy Puppeteer) .github/workflows/e2e.yml is entirely commented out — E2E does not run in CI jest-puppeteer / puppeteer remain in package.json as dead tooling Playwright in this repo is Python-only (application/prompt_client/ for embeddings/scraping). It is not the frontend E2E runner. make install-python must keep playwright install. Two open PRs overlap on Cypress migration (see Pending merges): #729 — restore Cypress under application/frontend/src/test/cypress/, re-enable e2e.yml #774 — fuller migration: root cypress.config.js, cypress/e2e/smoke.cy.js, stabilized make e2e, switches test:e2e to cypress run Related: #523 (fix e2e tests). Implementation instructions 0
Rate what actually matters after opening a pull request here.
Rate your first-hand PR experience (review speed, maintainer responsiveness, and onboarding ease) to help other contributors.
When evaluating whether to contribute to OWASP/OpenCRE, response velocity and maintainer engagement are crucial. GetMerged continuously tracks pull request trajectories, first-comment latency, and code review rounds to help developers avoid submitting pull requests to backlogged repositories.
Currently, maintainers of OWASP/OpenCRE acknowledge new external contributions in approximately 21 hours. Out of all submitted pull requests from non-core authors in the last 180-day window, 61.1% were successfully merged into the primary branch.
OWASP/OpenCRE has a recorded first-timer success rate of 50.0%. Repositories ranked Welcoming typically provide actionable feedback during code reviews and actively nurture new community contributors.
The initial maintainer response time averages ~21 hours. Keeping PRs scoped to single concerns and ensuring CI checks succeed will optimize review turnaround.
The C-Rank™ index scores repositories on a 0 to 100 scale using an objective formula: external PR merge rates, initial response speed, active maintainer count, and first-time contributor retention. A score of 57.6 places OWASP/OpenCRE in the Welcoming tier.
The external pull request merge rate is 61.1%. GetMerged isolates non-core community contributions so external developers get an accurate benchmark of PR acceptance probability.
OWASP/OpenCRE does not have open beginner labels indexed currently, but external PRs for bugs and documentation improvements are evaluated via normal issue triage.
All metrics displayed for OWASP/OpenCRE are automatically retrieved via the public GitHub API and recalculated daily. Insider pull requests submitted by repository owners or organization members are excluded from merge rate calculations to preserve objective external contributor statistics.