GitHub Change Risk APIPublic preview / read-only

Change the code.
See the risk.

Deterministic, explainable risk signals for a public GitHub compare range. It reads public change metadata and diff content only: no repository execution, private access, or live-target probing.

01 / output

Useful triage data.

Scores and names signals around access control, funds and contracts, deployment, dependencies, migrations, CI, change size, test coverage, and review-sensitive diff patterns.

02 / boundary

Not an audit.

A low score does not mean safe. This is a fast, path-and-diff based starting point for review, not a security certification.

03 / access

Preview is open.

Public GitHub comparisons only. The summary preview is rate-limited to 30 requests per client per minute. Full per-file reports accept 0.01 USDC or 0.00001 ETH on Base.

Try it

Compare two public refs.

Enter a public repository and two refs to get an aggregate preview. Nothing is cloned or executed.

Free preview. Public repositories only.

GET /v1/github-risk-delta?repo=OWNER/REPOSITORY&base=REF&head=REF

OpenAPI document · Source and limits

Workflow / free

Put the preview in a pull request workflow.

The installable Action writes the score, level, and compact report to workflow outputs and the job summary.

- uses: orangevakaris/github-change-risk@v1
  with:
    repository: ${{ github.repository }}
    base: ${{ github.event.pull_request.base.sha }}
    head: ${{ github.event.pull_request.head.sha }}

Install the GitHub Action

Full report / Base

Get per-file review cues.

Send at least 0.01 native USDC or 0.00001 ETH on Base to 0x5157E1783c81DA37DAa8Bb490c68b30aB0e9D3A7. Open a pre-filled USDC transfer or open a pre-filled ETH transfer in a compatible wallet and confirm the destination. After three confirmations, add the transaction hash as paymentTx to the full-report route. One payment funds one report.

GET /v1/github-risk-delta/full?repo=OWNER/REPOSITORY&base=REF&head=REF&paymentTx=0x...

Payment requirements