Risk Leaderboard

194 open-source repositories ranked by activity-weighted risk — complexity × recent commit frequency. Higher scores mean more urgent refactoring priority.

Repositories 194
Avg Risk Score 18.5
Languages 9
Last Updated 2026-07-25
# Repository Risk
1 mudler/LocalAI 42.3
2 cypress-io/cypress 29.4
3 HeyPuter/puter 28.1
4 eslint/eslint 26.8
5 prettier/prettier 26.1
6 facebook/react 25.4
7 BerriAI/litellm 24.8
8 odoo/odoo 24.8
9 appsmithorg/appsmith 24.4
10 safishamsi/graphify 22.5
11 calcom/cal.com 22.4
12 jax-ml/jax 22.4
13 fanmingming/live 22.2
14 pandas-dev/pandas 22.1
15 vercel-labs/agent-browser 21.7
16 gsd-build/get-shit-done 21.7
17 CodePhiliaX/Chat2DB 21.7
18 sqlmapproject/sqlmap 21.6
19 usebruno/bruno 21.5
20 agno-agi/agno 21.4
21 lutzroeder/netron 21.4
22 ToolJet/ToolJet 21.4
23 chatboxai/chatbox 21.3
24 junegunn/fzf 21.3
25 colinhacks/zod 21.3
26 evanw/esbuild 21.2
27 novuhq/novu 21.2
28 FlowiseAI/Flowise 21.2
29 koala73/worldmonitor 21.2
30 exo-explore/exo 21.1
31 abhigyanpatwari/GitNexus 21.1
32 vitejs/vite 21.0
33 drawdb-io/drawdb 21.0
34 MHSanaei/3x-ui 21.0
35 NervJS/taro 21.0
36 mattermost/mattermost 20.9
37 Automattic/mongoose 20.8
38 apache/airflow 20.7
39 getsentry/sentry 20.7
40 janhq/jan 20.7
41 deepspeedai/DeepSpeed 20.7
42 chakra-ui/chakra-ui 20.6
43 crewAIInc/crewAI 20.6
44 react-hook-form/react-hook-form 20.6
45 NanmiCoder/MediaCrawler 20.5
46 nwjs/nw.js 20.5
47 paperclipai/paperclip 20.5
48 gogs/gogs 20.3
49 zhayujie/CowAgent 20.3
50 lovell/sharp 20.2
51 typeorm/typeorm 20.2
52 preactjs/preact 20.2
53 go-gorm/gorm 20.2
54 parallax/jsPDF 20.2
55 portainer/portainer 20.1
56 badlogic/pi-mono 20.1
57 GoogleChrome/lighthouse 20.1
58 virattt/ai-hedge-fund 20.0
59 mifi/lossless-cut 20.0
60 gradio-app/gradio 20.0
61 mitmproxy/mitmproxy 19.9
62 swagger-api/swagger-ui 19.9
63 thedotmack/claude-mem 19.9
64 xuxueli/xxl-job 19.9
65 earendil-works/pi 19.9
66 streamlit/streamlit 19.8
67 XTLS/Xray-core 19.8
68 redisson/redisson 19.8
69 conductor-oss/conductor 19.8
70 ray-project/ray 19.8
71 expo/expo 19.8
72 hashicorp/terraform 19.8
73 gethomepage/homepage 19.7
74 code-yeongyu/oh-my-openagent 19.7
75 rustfs/rustfs 19.7
76 CherryHQ/cherry-studio 19.7
77 HKUDS/nanobot 19.6
78 upstash/context7 19.6
79 garrytan/gstack 19.6
80 pingcap/tidb 19.5
81 outline/outline 19.5
82 gchq/CyberChef 19.5
83 cli/cli 19.4
84 Fission-AI/OpenSpec 19.4
85 run-llama/llama_index 19.4
86 SimplifyJobs/Summer2026-Internships 19.4
87 bmad-code-org/BMAD-METHOD 19.4
88 666ghj/BettaFish 19.3
89 phaserjs/phaser 19.3
90 kubernetes/kubernetes 19.3
91 tldraw/tldraw 19.3
92 bigskysoftware/htmx 19.2
93 remotion-dev/remotion 19.2
94 Aider-AI/aider 19.2
95 apache/rocketmq 19.2
96 hesreallyhim/awesome-claude-code 19.1
97 casey/just 19.1
98 serverless/serverless 19.1
99 twentyhq/twenty 19.0
100 AykutSarac/jsoncrack.com 19.0
101 elunez/eladmin 18.9
102 Textualize/textual 18.8
103 hpcaitech/ColossalAI 18.8
104 gofiber/fiber 18.8
105 remoteintech/remote-jobs 18.7
106 parcel-bundler/parcel 18.7
107 roboflow/supervision 18.7
108 alibaba/canal 18.7
109 Kong/insomnia 18.7
110 iced-rs/iced 18.6
111 v2ray/v2ray-core 18.6
112 pixijs/pixijs 18.6
113 D4Vinci/Scrapling 18.6
114 jdx/mise 18.6
115 chenglou/pretext 18.5
116 docsifyjs/docsify 18.5
117 FuelLabs/fuels-rs 18.5
118 paperless-ngx/paperless-ngx 18.3
119 vuetifyjs/vuetify 18.2
120 zen-browser/desktop 18.2
121 lapce/lapce 18.1
122 DavidHDev/react-bits 18.0
123 microsoft/qlib 18.0
124 ChromeDevTools/chrome-devtools-mcp 17.9
125 nolimits4web/swiper 17.9
126 AlistGo/alist 17.8
127 alibaba/zvec 17.8
128 markedjs/marked 17.8
129 meteor/meteor 17.7
130 layui/layui 17.7
131 vadimdemedes/ink 17.6
132 google/gson 17.4
133 juanfont/headscale 17.4
134 babysor/MockingBird 17.3
135 spf13/cobra 17.2
136 schollz/croc 17.2
137 skylot/jadx 17.2
138 shareAI-lab/learn-claude-code 17.1
139 lyswhut/lx-music-desktop 17.0
140 google/langextract 16.9
141 danielmiessler/Fabric 16.9
142 nestjs/nest 16.9
143 trpc/trpc 16.9
144 amruthpillai/reactive-resume 16.8
145 TanStack/query 16.8
146 dcloudio/uni-app 16.8
147 vercel/hyper 16.8
148 wshobson/agents 16.7
149 OpenCut-app/OpenCut 16.6
150 santifer/career-ops 16.6
151 binarywang/WxJava 16.4
152 hexojs/hexo 16.4
153 ueberdosis/tiptap 16.1
154 elysiajs/elysia 16.1
155 RSSNext/Folo 16.1
156 freqtrade/freqtrade 16.0
157 labstack/echo 16.0
158 charmbracelet/bubbletea 15.9
159 xyflow/xyflow 15.9
160 lerna/lerna 15.8
161 2noise/ChatTTS 15.7
162 docker/compose 15.6
163 umami-software/umami 15.5
164 tokio-rs/tokio 15.5
165 styled-components/styled-components 15.4
166 immerjs/immer 15.4
167 sahat/hackathon-starter 15.3
168 filebrowser/filebrowser 15.2
169 vuejs/vitepress 15.2
170 redis/redis 15.1
171 sunface/rust-course 14.9
172 Leaflet/Leaflet 14.8
173 google/comprehensive-rust 14.7
174 yarnpkg/yarn 14.7
175 koajs/koa 14.6
176 ajeetdsouza/zoxide 14.5
177 google/zx 14.4
178 sharkdp/fd 14.3
179 jingyaogong/minimind 14.0
180 videojs/video.js 14.0
181 microsoft/monaco-editor 14.0
182 naptha/tesseract.js 13.5
183 pcottle/learnGitBranching 13.1
184 chalk/chalk 12.8
185 iamkun/dayjs 12.7
186 ant-design/ant-design-pro 12.1
187 type-challenges/type-challenges 11.6
188 fastapi/full-stack-fastapi-template 10.6
189 upscayl/upscayl 9.9
190 sudheerj/javascript-interview-questions 9.0
191 indiespirit/react-native-chart-kit 8.7
192 sudheerj/reactjs-interview-questions 8.3
193 typescript-cheatsheets/react 4.8
194 vsavkin/large-monorepo 3.6

About the Risk Score

Each score is an activity-weighted risk metric: structural complexity (cyclomatic complexity × nesting depth × fan-out) multiplied by recent commit frequency. A function that is both highly complex and actively changing scores highest — it represents live regression risk, not just latent debt. Scores are not comparable across different versions of the same repo — use them to rank hotspots within a single analysis.

≥ 20 critical ≥ 10 high ≥ 5 medium < 5 low