nodejs/node audit
Delivery risk audit on GitHub · Analysed 11 Aug 2026 · GitHub
This delivery risk audit analyses the last 90 days of public commit history for nodejs/node. It identifies files that concentrate bug-fix activity, measures revert frequency as a signal of release instability, and maps contributor spread to highlight knowledge concentration risk. The risk score weights bug-fix commits and reverts for each file, with higher scores indicating files that have required the most corrective attention in the analysed period.
Top Risk Files
| File | Risk | Bug Commits | Reverts | Commit touches |
|---|---|---|---|---|
| src/node_sqlite.cc | 30 | 3 | 0 | — |
| .github/workflows/commit-queue.yml | 10 | 1 | 0 | — |
| .github/workflows/test-shared.yml | 10 | 1 | 0 | — |
| benchmark/net/net-blocklist.js | 10 | 1 | 0 | — |
| benchmark/test_runner/hooks.js | 10 | 1 | 0 | — |
| benchmark/test_runner/test-options.js | 10 | 1 | 0 | — |
| doc/api/buffer.md | 10 | 1 | 0 | — |
| doc/api/child_process.md | 10 | 1 | 0 | — |
| doc/api/net.md | 10 | 1 | 0 | — |
| doc/api/permissions.md | 10 | 1 | 0 | — |
| doc/api/quic.md | 10 | 1 | 0 | — |
| doc/api/worker_threads.md | 10 | 1 | 0 | — |
| doc/contributing/large-pull-requests.md | 10 | 1 | 0 | — |
| lib/internal/blocklist.js | 10 | 1 | 0 | — |
| lib/internal/streams/iter/broadcast.js | 10 | 1 | 0 | — |
| lib/internal/streams/iter/classic.js | 10 | 1 | 0 | — |
| lib/internal/streams/iter/push.js | 10 | 1 | 0 | — |
| lib/internal/tls/secure-context.js | 10 | 1 | 0 | — |
| lib/internal/tls/wrap.js | 10 | 1 | 0 | — |
| lib/internal/webstreams/writablestream.js | 10 | 1 | 0 | — |
Other audited repositories
- facebook/react
- tlsnojokes-sudo/DPH-Classifieds_audit
- LiberoNuvola/PRE-RICH-scratch-and-win-game
- kubernetes/kubernetes
- denoland/deno
- opentofu/opentofu
- apache/kafka
- cilium/cilium
- helm/helm
- argoproj/argo-workflows
- istio/istio
- ansible/ansible
✨ AI Interpretation
Get a plain-English explanation of what these metrics may (and may not) mean for delivery risk.
View interactive reportWhat does your private codebase look like?
This analyses public commit history. Connect a private repo to see bug-fix hotspots, ownership risk and delivery friction on the code your team ships every day. Read-only, no source code stored.
Audit your private repo, free →