Skip to content

Releases: hidetzu/riskcheck

v0.1.0 — initial public release

04 May 08:48

Choose a tag to compare

riskcheck v0.1.0

Initial public release of riskcheck — a CLI that quantifies code change risk and outputs structured, explainable results.

go install github.com/hidetzu/riskcheck@latest
riskcheck --base origin/main

Highlights

  • Risk score 0–100 computed from git diff and git log, with a clear low / medium / high level
  • Explainable: every score comes with concrete reasons
  • Per-file risk for AI / reviewer consumption
  • Team customization via .riskcheck.yaml (thresholds, weights, paths, test patterns)
  • External tool integration for complexity and coverage signals
  • Pluggable output: JSON (default) or human-readable text
  • CI friendly: exit code reflects risk level (0 = low, 1 = medium+, 2 = error)

Signals (9)

Signal Description
large_change Too many files changed
high_insertions Too many lines added
high_deletions Too many lines deleted
hotspot Frequently changed files (last 90 days)
no_test_change Production code changed without test updates
security_module Security-related paths modified (auth, crypto, …)
core_module Core business logic paths modified (config, payment, …)
high_complexity High cyclomatic complexity (external input)
low_coverage Low test coverage (external input)

Quick example

$ riskcheck --base origin/main --format text
Risk Score: 55 / 100 (medium)

Files changed: 5
Insertions:    120
Deletions:     30

Reasons:
  - security module modified (src/auth/login.go)
  - no test updates for changed files
  - hotspot file touched (src/auth/login.go changed 8 times in last 90 days)

High-risk files:
  0.75  src/auth/login.go  [hotspot, security_module]
  0.50  src/config/app.go  [core_module]

AI integration

riskcheck --base origin/main | claude -p "Review the high-risk areas in this change"

What's next

See specs/roadmap.md for the post-public roadmap (v0.2.0+).