Every commit scored for change-risk against this repo's own history, so 'elevated' means elevated here rather than on some global curve.
Needs review
96 commits sit in this repo's top risk tercile, which is 33% of the 289scored. The cut is drawn against this codebase's own history rather than a global curve, so a quiet repo still fills its top band, and here it starts at 6.8 out of 10. What pushes a commit up is size and spread together: a large change confined to one area scores below a smaller one scattered across a dozen files.
Commit categories over time, read off the subject line. Fixes carry the accent because that is the series this chart exists to show.
Began feature-led, now leaning chore.
Ranked by change-risk, highest first. Priority is a tercile of this repo's own distribution, so a quiet repo still fills its top band.
| # | Commit | Author | When | Lines | Risk | Top driver |
|---|---|---|---|---|---|---|
| 1 | 900102e9refactor: create workspace + add client GUI (#133) | Jakub Kubík | 8mo ago | +10.7K -1.2K | 100%Elevated | more lines added than baseline |
| 2 | 58bae76cfeat(cargo): add Cargo.lock | Jakub Kubík | 3y ago | +1.8K -5 | 99%Elevated | more lines added than baseline |
| 3 | be04d476feat: properly handle full tunnel routes (#196) | Jakub Kubík | 3mo ago | +3.9K -204 | 99%Elevated | more lines added than baseline |
| 4 | c03c9b12refactor!: base authentication on PKI handshake (#176) | Jakub Kubík | 5mo ago | +3.0K -1.6K | 99%Elevated | more lines added than baseline |
| 5 | e52289e8fead: add per-user address pools (#181) | Jakub Kubík | 5mo ago | +1.0K -76 | 98%Elevated | more lines added than baseline |
| 6 | bbf41e9afeat: add per-user bandwidth control + metrics (#177) | Jakub Kubík | 5mo ago | +1.4K -58 | 98%Elevated | more lines added than baseline |
| 7 | 730fafcarefactor: update interface traits + use tun-rs (#121) | Jakub Kubík | 1y ago | +1.2K -629 | 98%Elevated | more lines added than baseline |
| 8 | e5ce50e9refactor(*): refactor code to allow multiple tunnels per server | Jakub Kubík | 3y ago | +729 -451 | 98%Elevated | more lines added than baseline |
| 9 | 4596462cfeat!: add support for standard and PQ noise handshakes (#175) | Jakub Kubík | 6mo ago | +1.7K -537 | 97%Elevated | more lines added than baseline |
| 10 | 04f5fa3bchore: bump tun-rs + socket2 (#140) | Jakub Kubík | 10mo ago | +709 -374 | 97%Elevated | more lines added than baseline |
| 11 | 705a2ebafeat!: change licence to AGPLv3 | Jakub Kubík | 1y ago | +661 -21 | 97%Elevated | more lines added than baseline |
| 12 | 5b28df4afeat: initial commit | Jakub Kubík | 3y ago | +459 -0 | 96%Elevated | more lines added than baseline |
| 13 | 84c995e1refactor(auth): refactor server-side auth | Jakub Kubík | 3y ago | +420 -304 | 96%Elevated | more lines added than baseline |
| 14 | 5e8a8084Accept existing TUN fd in client start path (#207) | Lee Sang Hoon | 1mo ago | +397 -40 | 95%Elevated | more lines added than baseline |
| 15 | 33035603feat: add configurable client isolation (#57) | Jakub Kubík | 2y ago | +369 -113 | 95%Elevated | more lines added than baseline |
| 16 | 41b7e7bdrefactor!: remove tunnel, add signal handlers (#44) | Jakub Kubík | 2y ago | +519 -597 | 95%Elevated | more lines added than baseline |
| 17 | d57c212btest: add authentication integration test (#31) | Jakub Kubík | 2y ago | +422 -182 | 95%Elevated | more lines added than baseline |
| 18 | f250b463feat(crypto): add optional support for post-quantum key-exchange (#95) | Jakub Kubík | 1y ago | +643 -302 | 94%Elevated | more lines added than baseline |
| 19 | acf4e5d6[#50] refactor!: make authentication modular (#51) | Jakub Kubík | 2y ago | +432 -289 | 94%Elevated | more lines added than baseline |
| 20 | 015a16d4refactor: improve error handling (#32) | Jakub Kubík | 2y ago | +391 -404 | 94%Elevated | more lines added than baseline |
| 21 | 2dc9927echore: update example configs and docs | M0dEx | 3mo ago | +399 -47 | 92%Elevated | more lines added than baseline |
| 22 | a421a188refactor: update to newest quinn and rustls (#70) | Jakub Kubík | 2y ago | +413 -321 | 92%Elevated | more lines added than baseline |
| 23 | 5de88bcctest: add full end-to-end test | Jakub Kubík | 2y ago | +249 -0 | 92%Elevated | more lines added than baseline |
| 24 | 146769bcrefactor: add interface trait | Jakub Kubík | 2y ago | +364 -326 | 92%Elevated | more lines added than baseline |
| 25 | f8ea3ad9docs(*): add docstrings to all modules | Jakub Kubík | 3y ago | +243 -32 | 92%Elevated | more lines added than baseline |
| 26 | 3e7c1962feat: support PQ noise by upgrading to reishi 0.4 (#211) | Jakub Kubík | 4w ago | +408 -66 | 91%Elevated | more lines added than baseline |
| 27 | 3b9f950echore: bump package version + deps | Jakub Kubík | 7mo ago | +244 -239 | 91%Elevated | more lines added than baseline |
| 28 | 0fcfa807chore: update packages + quinn (security advisory) | Jakub Kubík | 1y ago | +258 -125 | 91%Elevated | more lines added than baseline |
| 29 | 5bc71862feat(network): add DNS servers configuration for Linux, FreeBSD, MacOS | Jakub Kubík | 2y ago | +308 -18 | 90%Elevated | more lines added than baseline |
| 30 | b4ac9669feat!: add support for client-side route configuration (#82) | Jakub Kubík | 2y ago | +329 -237 | 90%Elevated | more lines added than baseline |
| 31 | 09c0c786refactor(*): improve error handling | Jakub Kubík | 3y ago | +199 -91 | 90%Elevated | more lines added than baseline |
| 32 | 92ccf840chore: bump package version + tun-rs | Jakub Kubík | 4mo ago | +199 -154 | 89%Elevated | more lines added than baseline |
| 33 | 73bff33cfeat(client & server): refactor client and server interfaces | Jakub Kubík | 3y ago | +142 -55 | 89%Elevated | more lines added than baseline |
| 34 | 11dcfd0dchore: bump package version + deps | Jakub Kubík | 4mo ago | +186 -146 | 87%Elevated | more lines added than baseline |
| 35 | cf540f5efeat: add configurable congestion controllers (#152) | Jakub Kubík | 8mo ago | +245 -30 | 87%Elevated | more lines added than baseline |
| 36 | 2d2348bbfix: properly handle command execution (#150) | Jakub Kubík | 8mo ago | +171 -96 | 87%Elevated | more lines added than baseline |
| 37 | 1137c865refactor: fully migrate to aws-lc-rs + allow runtime KEX selection (#115) | Jakub Kubík | 1y ago | +286 -338 | 87%Elevated | more lines added than baseline |
| 38 | b9a2cec8feat(client, tunnel, connection): improve error logging | Jakub Kubík | 3y ago | +141 -37 | 87%Elevated | more lines added than baseline |
| 39 | 6d1e2c07feat(server): add Connection wrapper and handle incoming connections | Jakub Kubík | 3y ago | +121 -19 | 87%Elevated | more lines added than baseline |
| 40 | 6841406bstyle: reformat with cargo fmt | Jakub Kubík | 3y ago | +113 -76 | 87%Elevated | more lines added than baseline |
| 41 | 94035206feat(config): add support for configuration files | Jakub Kubík | 3y ago | +142 -47 | 87%Elevated | more lines added than baseline |
| 42 | 2f8152acfix: bump reishi-quinn to fix crypto issues | Jakub Kubík | 3mo ago | +185 -165 | 85%Elevated | more lines added than baseline |
| 43 | d39cc831chore(deps): bump tokio from 1.44.0 to 1.44.2 (#119) | dependabot[bot] | 1y ago | +210 -129 | 85%Elevated | more lines added than baseline |
| 44 | afa6a83afeat(client): refactor client into a struct | Jakub Kubík | 3y ago | +197 -188 | 85%Elevated | more lines added than baseline |
| 45 | 97387fc1refactor(*): cleanup code and move executables to bin/ | Jakub Kubík | 3y ago | +143 -135 | 85%Elevated | more lines added than baseline |
| 46 | 152de8e1feat(server): add TunWorker for unified read and write workers for TUN interfaces | Jakub Kubík | 3y ago | +174 -25 | 85%Elevated | more lines added than baseline |
| 47 | 100f72earefactor(auth): remove manual session keeping | Jakub Kubík | 2y ago | +155 -457 | 84%Elevated | more lines added than baseline |
| 48 | 107cfd55feat(auth): implement authentication for connection | Jakub Kubík | 3y ago | +138 -29 | 84%Elevated | more lines added than baseline |
| 49 | f20cfa3bchore: update deps + bump package versions | Jakub Kubík | 6mo ago | +139 -138 | 83%Elevated | more lines added than baseline |
| 50 | 67113373fix: explicitly handle lenient certificate parsing (#159) | Jakub Kubík | 8mo ago | +182 -22 | 83%Elevated | more lines added than baseline |
Two views of the same model: where the cuts fall, and what commit shape lands you above them.
Every scored commit, binned on the raw 0 to 10 score rather than the percentile. Percentile ranks are uniform by construction, so that axis has no shape to draw. The dashed lines are the tercile cuts behind each row's priority pill.
The 200 most recent commits, on their own recency sample rather than the feed above: that defaults to risk-sorted, so reusing it would plot only the top tercile and call it the spread. Big and scattered is what the model penalises. Click a dot to open it.
quincy-rs/quincy has 311 commits in its history from 4 contributors, the first of them Dec 3, 2022. In the last 90 days 24 files were touched, 30 times in total, most often client.rs. Every commit is scored for change risk from its size, spread and the history of the files it touches.
