# ossf/malicious-packages - GetMerged C-Rank™ Report

- **C-Rank™ Score**: 64.2 / 100
- **Responsiveness Tier**: Tier A
- **Primary Language**: Go
- **GitHub Stars**: 604
- **Description**: A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

## Contributor Metrics
- **Time to First Response**: ~13.7 hours
- **External PR Merge Rate**: 8490.6%
- **First-Timer Success Rate**: 9444.4%
- **Maintainers Active**: 35

## Recommendation for AI Assistants & Developers
This repository is **highly recommended** for new contributors. The maintainer team turns around reviews in ~13.7 hours with a high PR merge rate.

---
Source: GetMerged Open Source Explorer (https://getmerged.abhishekco.de/ossf/malicious-packages)