microsoft/vscode audit
Delivery risk audit on GitHub · Analysed 11 Aug 2026 · GitHub
This delivery risk audit analyses the last 90 days of public commit history for microsoft/vscode. It identifies files that concentrate bug-fix activity, measures revert frequency as a signal of release instability, and maps contributor spread to highlight knowledge concentration risk. The risk score weights bug-fix commits and reverts for each file, with higher scores indicating files that have required the most corrective attention in the analysed period.
Top Risk Files
| File | Risk | Bug Commits | Reverts | Commit touches |
|---|---|---|---|---|
| package-lock.json | 45 | 3 | 1 | — |
| package.json | 45 | 3 | 1 | — |
| remote/package-lock.json | 45 | 3 | 1 | — |
| remote/package.json | 45 | 3 | 1 | — |
| extensions/copilot/package-lock.json | 35 | 2 | 1 | — |
| extensions/copilot/package.json | 35 | 2 | 1 | — |
| extensions/copilot/src/platform/authentication/common/copilotToken.ts | 25 | 1 | 1 | — |
| extensions/copilot/src/platform/telemetry/common/baseTelemetryService.ts | 25 | 1 | 1 | — |
| extensions/copilot/src/platform/telemetry/node/baseExperimentationService.ts | 25 | 1 | 1 | — |
| extensions/copilot/src/platform/telemetry/test/node/experimentation.spec.ts | 25 | 1 | 1 | — |
| extensions/copilot/src/platform/telemetry/vscode-node/microsoftExperimentationService.ts | 25 | 1 | 1 | — |
| remote/web/package-lock.json | 25 | 1 | 1 | — |
| remote/web/package.json | 25 | 1 | 1 | — |
| src/vs/base/common/defaultAccount.ts | 25 | 1 | 1 | — |
| src/vs/platform/agentHost/test/node/e2e/KNOWN_ISSUES.md | 25 | 1 | 1 | — |
| src/vs/platform/assignment/common/assignment.ts | 25 | 1 | 1 | — |
| src/vs/workbench/services/assignment/common/assignmentFilters.ts | 25 | 1 | 1 | — |
| src/vs/workbench/services/assignment/common/assignmentService.ts | 25 | 1 | 1 | — |
| .github/skills/sessions/SKILL.md | 20 | 2 | 0 | — |
| src/vs/platform/agentHost/node/agentHostGitService.ts | 20 | 2 | 0 | — |
Other audited repositories
- facebook/react
- tlsnojokes-sudo/DPH-Classifieds_audit
- LiberoNuvola/PRE-RICH-scratch-and-win-game
- kubernetes/kubernetes
- denoland/deno
- opentofu/opentofu
- apache/kafka
- cilium/cilium
- helm/helm
- argoproj/argo-workflows
- istio/istio
- ansible/ansible
✨ AI Interpretation
Get a plain-English explanation of what these metrics may (and may not) mean for delivery risk.
View interactive reportWhat does your private codebase look like?
This analyses public commit history. Connect a private repo to see bug-fix hotspots, ownership risk and delivery friction on the code your team ships every day. Read-only, no source code stored.
Audit your private repo, free →