Risk Leaderboard

121 open-source repositories ranked by activity-weighted risk — complexity × recent commit frequency. Higher scores mean more urgent refactoring priority.

Repositories 121
Avg Risk Score 18.3
Languages 6
Last Updated 2026-06-05
gojavajavascriptpythonrusttypescript
# Repository Risk
1 cypress-io/cypress 29.4
2 HeyPuter/puter 28.1
3 eslint/eslint 26.8
4 facebook/react 25.4
5 appsmithorg/appsmith 24.4
6 safishamsi/graphify 22.5
7 calcom/cal.com 22.4
8 vercel-labs/agent-browser 21.7
9 gsd-build/get-shit-done 21.7
10 CodePhiliaX/Chat2DB 21.7
11 usebruno/bruno 21.5
12 chatboxai/chatbox 21.3
13 colinhacks/zod 21.3
14 evanw/esbuild 21.2
15 novuhq/novu 21.2
16 FlowiseAI/Flowise 21.2
17 exo-explore/exo 21.1
18 abhigyanpatwari/GitNexus 21.1
19 drawdb-io/drawdb 21.0
20 MHSanaei/3x-ui 21.0
21 NervJS/taro 21.0
22 mattermost/mattermost 20.9
23 janhq/jan 20.7
24 chakra-ui/chakra-ui 20.6
25 react-hook-form/react-hook-form 20.6
26 NanmiCoder/MediaCrawler 20.5
27 paperclipai/paperclip 20.5
28 zhayujie/CowAgent 20.3
29 typeorm/typeorm 20.2
30 preactjs/preact 20.2
31 go-gorm/gorm 20.2
32 portainer/portainer 20.1
33 badlogic/pi-mono 20.1
34 virattt/ai-hedge-fund 20.0
35 mifi/lossless-cut 20.0
36 xuxueli/xxl-job 19.9
37 earendil-works/pi 19.9
38 XTLS/Xray-core 19.8
39 redisson/redisson 19.8
40 conductor-oss/conductor 19.8
41 expo/expo 19.8
42 code-yeongyu/oh-my-openagent 19.7
43 rustfs/rustfs 19.7
44 CherryHQ/cherry-studio 19.7
45 HKUDS/nanobot 19.6
46 upstash/context7 19.6
47 garrytan/gstack 19.6
48 outline/outline 19.5
49 Fission-AI/OpenSpec 19.4
50 bmad-code-org/BMAD-METHOD 19.4
51 kubernetes/kubernetes 19.3
52 tldraw/tldraw 19.3
53 remotion-dev/remotion 19.2
54 apache/rocketmq 19.2
55 hesreallyhim/awesome-claude-code 19.1
56 casey/just 19.1
57 twentyhq/twenty 19.0
58 AykutSarac/jsoncrack.com 19.0
59 elunez/eladmin 18.9
60 remoteintech/remote-jobs 18.7
61 alibaba/canal 18.7
62 Kong/insomnia 18.7
63 iced-rs/iced 18.6
64 pixijs/pixijs 18.6
65 D4Vinci/Scrapling 18.6
66 jdx/mise 18.6
67 chenglou/pretext 18.5
68 docsifyjs/docsify 18.5
69 FuelLabs/fuels-rs 18.5
70 vuetifyjs/vuetify 18.2
71 lapce/lapce 18.1
72 microsoft/qlib 18.0
73 ChromeDevTools/chrome-devtools-mcp 17.9
74 AlistGo/alist 17.8
75 markedjs/marked 17.8
76 layui/layui 17.7
77 vadimdemedes/ink 17.6
78 google/gson 17.4
79 juanfont/headscale 17.4
80 spf13/cobra 17.2
81 schollz/croc 17.2
82 skylot/jadx 17.2
83 shareAI-lab/learn-claude-code 17.1
84 lyswhut/lx-music-desktop 17.0
85 google/langextract 16.9
86 trpc/trpc 16.9
87 TanStack/query 16.8
88 vercel/hyper 16.8
89 OpenCut-app/OpenCut 16.6
90 santifer/career-ops 16.6
91 binarywang/WxJava 16.4
92 hexojs/hexo 16.4
93 elysiajs/elysia 16.1
94 RSSNext/Folo 16.1
95 labstack/echo 16.0
96 charmbracelet/bubbletea 15.9
97 xyflow/xyflow 15.9
98 lerna/lerna 15.8
99 2noise/ChatTTS 15.7
100 docker/compose 15.6
101 umami-software/umami 15.5
102 tokio-rs/tokio 15.5
103 styled-components/styled-components 15.4
104 immerjs/immer 15.4
105 sahat/hackathon-starter 15.3
106 filebrowser/filebrowser 15.2
107 sunface/rust-course 14.9
108 google/comprehensive-rust 14.7
109 koajs/koa 14.6
110 ajeetdsouza/zoxide 14.5
111 google/zx 14.4
112 sharkdp/fd 14.3
113 jingyaogong/minimind 14.0
114 chalk/chalk 12.8
115 iamkun/dayjs 12.7
116 ant-design/ant-design-pro 12.1
117 type-challenges/type-challenges 11.6
118 fastapi/full-stack-fastapi-template 10.6
119 sudheerj/javascript-interview-questions 9.0
120 sudheerj/reactjs-interview-questions 8.3
121 typescript-cheatsheets/react 4.8

About the Risk Score

Each score is an activity-weighted risk metric: structural complexity (cyclomatic complexity × nesting depth × fan-out) multiplied by recent commit frequency. A function that is both highly complex and actively changing scores highest — it represents live regression risk, not just latent debt. Scores are not comparable across different versions of the same repo — use them to rank hotspots within a single analysis.

≥ 20 critical ≥ 10 high ≥ 5 medium < 5 low
← All Analyses Browse by Pattern →