opentofu/opentofu audit
Delivery risk audit on GitHub · Analysed 12 Aug 2026 · GitHub
This delivery risk audit analyses the last 90 days of public commit history for opentofu/opentofu. It identifies files that concentrate bug-fix activity, measures revert frequency as a signal of release instability, and maps contributor spread to highlight knowledge concentration risk. The risk score weights bug-fix commits and reverts for each file, with higher scores indicating files that have required the most corrective attention in the analysed period.
Top Risk Files
| File | Risk | Bug Commits | Reverts | Commit touches |
|---|---|---|---|---|
| CHANGELOG.md | 30 | 3 | 0 | — |
| internal/tofu/context_plan_test.go | 30 | 3 | 0 | — |
| internal/tofu/context_temp_runtime_test.go | 30 | 3 | 0 | — |
| internal/engine/planning/execgraph_resource.go | 20 | 2 | 0 | — |
| internal/tofu/node_resource_abstract.go | 20 | 2 | 0 | — |
| internal/tofu/upgrade_resource_state.go | 20 | 2 | 0 | — |
| go.mod | 10 | 1 | 0 | — |
| go.sum | 10 | 1 | 0 | — |
| internal/backend/remote-state/s3/backend_test.go | 10 | 1 | 0 | — |
| internal/backend/remote-state/s3/backend.go | 10 | 1 | 0 | — |
| internal/command/command_test.go | 10 | 1 | 0 | — |
| internal/command/views/hook_json_test.go | 10 | 1 | 0 | — |
| internal/command/views/hook_json.go | 10 | 1 | 0 | — |
| internal/configs/removed_test.go | 10 | 1 | 0 | — |
| internal/configs/removed.go | 10 | 1 | 0 | — |
| internal/engine/internal/execgraph/builder.go | 10 | 1 | 0 | — |
| internal/engine/internal/execgraph/compiler_ops.go | 10 | 1 | 0 | — |
| internal/engine/internal/execgraph/compiler.go | 10 | 1 | 0 | — |
| internal/engine/planning/plan_eval_glue.go | 10 | 1 | 0 | — |
| internal/engine/planning/plan_replace_order_test.go | 10 | 1 | 0 | — |
Other audited repositories
- facebook/react
- LiberoNuvola/PRE-RICH-scratch-and-win-game
- kubernetes/kubernetes
- denoland/deno
- apache/kafka
- cilium/cilium
- helm/helm
- argoproj/argo-workflows
- istio/istio
- ansible/ansible
- prometheus/prometheus
- argoproj/argo-cd
✨ AI Interpretation
Get a plain-English explanation of what these metrics may (and may not) mean for delivery risk.
View interactive reportWhat does your private codebase look like?
This analyses public commit history. Connect a private repo to see bug-fix hotspots, ownership risk and delivery friction on the code your team ships every day. Read-only, no source code stored.
Audit your private repo, free →