Hub Function

Tier 2
hub_function

Called by many callers (high fan-in). Changes ripple across the codebase because every caller is a potential regression surface. Introduce a stable interface before refactoring internals.

Repos Detected 7
Avg Top Risk 31.6
Tier Relational / Temporal
mudler/LocalAI
go

LocalAI's static asset layer carries the highest activity risk

When I ran Hotspots against mudler/LocalAI, the highest activity-weighted risk scores didn't surface in the Go inference engine or the model-loading pipeline — they surfaced in two bundled JavaScript files served as static assets. Three of the five hotspots I found live in a single file, core/http/static/assets/htmx.js, which means any team member touching that module is navigating a dense web of structurally complex, interacting functions all at once.

risk 42.3 Read →
supabase/supabase
typescript ×2

supabase's type parser and storage explorer are the highest risks — all 5 touched today

Every function in supabase's top-five hotspot list was touched in the last day. Two of them share a single file in the docs layer. One has fan-out into 173 distinct callees. The structural debt isn't theoretical — it's actively compounding.

risk 20.9 Read →
eslint/eslint
javascript ×2

eslint's rule engine carries the highest activity risk — 2 functions to address first

The eslint rule most developers rely on to catch dead code also has 114 independent execution paths — and it's still being actively changed. That combination is a live regression risk, not a cleanup b

Read →
tldraw/tldraw
typescript

tldraw's Editor.ts carries the highest activity risk — 3 functions to address first

Three of tldraw's five highest-risk functions live in one file — and they're all actively changing. That's not a cleanup backlog; it's a live regression surface.

Read →
umami-software/umami
typescript

umami's API and tracker layer carry the highest activity risk — 5 functions to address first

umami's event ingestion endpoint and client tracker are structurally complex and still actively changing — a combination that makes regressions hard to catch and fixes expensive to ship.

Read →
xyflow/xyflow
typescript

xyflow's system layer carries the highest activity risk — 5 functions to address first

xyflow's drag system is carrying a CC of 42 and fans out to 32 distinct callees — structural debt that will bite hard the next time anyone touches it.

Read →
CodePhiliaX/Chat2DB
java ×4

Chat2DB's SQL processing layer carries the highest activity risk — 3 functions to address first

Chat2DB has 385 critical functions across 6,984 analyzed — and its SQL split processor alone carries a cyclomatic complexity of 58 with 38 distinct callees. Here's what to fix first.

Read →

Other Patterns