Repository Analyses
Nightly hotspot reports for popular open-source repositories. Each report ranks functions by activity-weighted risk — complexity × recent commit frequency — and labels the antipatterns driving the score.
pi-mono's AI provider layer carries the highest activity risk — 3 functions to address first
Three functions in pi-mono's OpenAI provider layer are both structurally extreme and actively changing right now — a combination that makes regressions nearly inevitable without targeted refactoring.
xxl-job's cron scheduler carries the highest activity risk — 2 functions to address first
xxl-job's cron parsing layer is its most urgent structural risk: two functions in CronExpression.java are both maximally complex and actively changing — a combination that makes every commit a potential regression
React's compiler and hooks plugin carry the highest activity risk — 5 functions
React's new compiler and its exhaustive-deps lint rule are where structural complexity meets live development pressure — five functions account for the repo's highest combined complexity and recent ac
Kubernetes's kubelet and apiserver carry the highest activity risk — 5 functions
The function converting container statuses in kubernetes's kubelet is both one of the most structurally complex and one of the most actively changing in the entire codebase — a live regression risk hi
fd's walk and exec subsystems carry the highest structural risk — 5 functions
fd's walk and exec subsystems concentrate the most complex, high-blast-radius code in the codebase — 11 critical functions across 274 total, with structural debt that warrants attention before the nex
esbuild's JS parser carries the highest activity risk — 3 functions to address first
esbuild's JS parser is simultaneously its most complex and most actively changing subsystem — three functions inside it carry cyclomatic complexity scores that dwarf anything else in the codebase, and
qlib's init and model layer carry the highest structural risk — 5 to refactor first
qlib's highest-risk functions aren't being actively changed right now — they're structural debt accumulating blast radius. Five god functions with CC scores up to 58 are overdue for refactoring before
Puter's GUI layer carries the highest activity risk — 3 functions to address first
Puter's window and file-item rendering code is both extremely complex and actively changing right now — a combination that makes every commit a potential regression in the core desktop UI.
textgen's chat and API layer carries the highest activity risk — 5 functions to fix first
I ran hotspots against oobabooga/textgen and found five functions that are both hard to reason about and being edited right now — the exact combination that produces regressions in production.
PixiJS's rendering layer carries the highest activity risk — 3 functions to address first
PixiJS has 131 critical-band functions across 4,035 analyzed — and its most urgent risks are actively changing right now inside SVG parsing, tagged-text layout, and adaptive bezier rendering.
docsify's YAML front-matter parser carries the highest activity risk — 3 functions to address first
docsify's YAML front-matter parser hides a nesting depth of 19 inside a single function — and the render layer is actively changing on top of CC 34 and fan-out of 80.
expo-router carries expo/expo's highest activity risk — 3 functions to address first
expo-router's navigation core is both one of the most structurally complex and most actively changing areas in expo/expo — a combination that makes it a live regression risk, not just a refactoring ba
RocketMQ's broker and client layers carry the highest activity risk — 5 functions to address first
RocketMQ's broker transaction checker and pop-revive service are both structurally complex and actively changing — a live regression risk hiding inside a high-throughput messaging core.
comprehensive-rust's theme layer carries the highest activity risk — 4 functions to address first
The riskiest code in google/comprehensive-rust isn't in the Rust source — it's in the JavaScript theme layer, where functions with fan-out as high as 72 are actively changing right now.
cobra's completion subsystem carries the highest activity risk — 5 functions to address first
cobra's completion layer is its most structurally fragile subsystem — one function alone calls 39 distinct callees, making any future change there a high-blast-radius event.
ChatTTS's scheduler carries the highest activity risk — 5 functions to address first
ChatTTS has 40 critical-band functions across 440 total, with its inference and scheduling layer accumulating structural debt that will bite hard the next time anyone opens those files.
awesome-cheatsheets shows a clean bill of structural risk — 9 functions, all low band
I ran a structural risk scan against awesome-cheatsheets expecting to find at least a few tangled functions worth flagging. Instead the repository came back almost entirely quiet, and that result itself is worth explaining.
OpenSpec's core and schema layers carry the highest activity risk — 5 functions to address first
OpenSpec has 91 critical functions out of 814 — and the highest-risk ones are clustered in two files. One is a structural debt bomb with CC 63 and nesting depth 9. Another is actively changing right n
Redisson's cron layer carries the highest activity risk — 5 functions to address first
Redisson's cron scheduling and async batch execution layer is both structurally extreme and actively changing — a combination that makes every commit a live regression risk right now.
iced's winit and widget layers carry the highest structural risk — 5 functions to address first
Two functions in iced's winit and widget layers carry extreme cyclomatic complexity — one topping CC 166 — making them the highest blast-radius targets before the next development push.
Xray-core's proxy layer carries the highest activity risk — 5 functions to address first
Xray-core's VLESS inbound handler is the most complex and most actively changed function in the codebase — all five top hotspots sit in the fire quadrant, making refactoring urgent.
awesome-claude-code's scripts carry the highest activity risk — 5 to address first
The scripts powering awesome-claude-code's automation are its riskiest code right now: process_resources has a cyclomatic complexity of 59 and is actively changing — a live regression risk hiding in p
dayjs's core formatter carries the highest structural debt — 5 functions to address first
dayjs's core format function has 38 independent execution paths and calls 13 distinct functions — structural debt that will bite hard the moment that code is touched again.
vercel/hyper's UI reducer and config migrator carry the highest real activity risk
Two first-party functions in vercel/hyper are both structurally complex and actively changing right now — making them live regression risks, not backlog items. Here's where the real exposure sits.