R Observatory: Metrics for risk.assessr version 4.1.3

Balamuta, James Joseph

doi:10.5281/zenodo.21843040

risk.assessr

4.1.3Package record

Assessing Package Risk Metrics

0packages depend

5.6Kdownloads / year

97.7%test coverage

13/13flavors OK

Overview

About

Maintained by Edward GillianCRAN page ↗GitHub ↗Website ↗Issues ↗Declared funder: Sanofi

A reliable and validated tool that captures detailed risk metrics such as R 'CMD' check, test coverage, traceability matrix, documentation, dependencies, reverse dependencies, suggested dependency analysis, repository data, and enhanced reporting for R packages that are local or stored on remote repositories such as GitHub, CRAN, and Bioconductor.

Changes in 4.1.3

New Features

fix CRAN Note by moving tools to Imports
add generate_security_vulnerabilities extraction function
add OSV data base - Defined ecosystems to security vulnerabilities vignette

From NEWS.md in the release

Install

R (CRAN)pak (dev)Ubuntu (r2u)Fedora (COPR)openSUSE (OBS)

install.packages("risk.assessr", repos = "https://cloud.r-project.org/")

Installs the current CRAN release. Prebuilt binaries on Windows and macOS.

if (!requireNamespace("pak", quietly = TRUE))
  install.packages("pak", repos = "https://cloud.r-project.org/")
pak::pak("pharmaverse/risk.assessr")

Development version from pharmaverse/risk.assessr. Installs pak first if it is not already available.

Release

# enable cranapt (r2u) if it is not already set up, then install
grep -rqs r2u.stat.illinois.edu /etc/apt/sources.list /etc/apt/sources.list.d/ \
  || curl -fsSL https://raw.githubusercontent.com/eddelbuettel/r2u/master/inst/scripts/add_cranapt_noble.sh | sudo bash
sudo apt install -y r-cran-risk.assessr

Fast Ubuntu binaries via r2u (no compilation). The cranapt setup runs once and is skipped when it is already enabled. We list this channel from recorded r2u download activity rather than from a live index of the repository, so treat it as last known rather than guaranteed.

bspm (used by r2u) also needs make: sudo apt install make

# enable the iucar/cran COPR if it is not already present, then install
ls /etc/yum.repos.d/*iucar*cran*.repo >/dev/null 2>&1 \
  || sudo dnf copr enable -y iucar/cran
sudo dnf install -y R-CRAN-risk.assessr

RPMs from the iucar/cran COPR, rebuilt from CRAN.

For install.packages() integration in R, also: sudo dnf install R-CoprManager

# add the autoCRAN OBS repo (Tumbleweed) if it is missing, then install
zypper -q lr | grep -qi autoCRAN \
  || sudo zypper addrepo https://download.opensuse.org/repositories/devel:/languages:/R:/autoCRAN/openSUSE_Tumbleweed/devel:languages:R:autoCRAN.repo
sudo zypper install -y R-risk.assessr

RPMs auto-built from CRAN on openSUSE OBS (Tumbleweed). We list this channel from recorded autoCRAN download activity rather than from a live index of the repository, so treat it as last known rather than guaranteed.

Health

CRAN checks

13OK

CRAN check page ↗

Slowest check: 7.6 min · r-release-macos-x86_64

Status changes

OK13 OK2026-09-26
NOTE11 OK, 2 NOTE2026-09-12
OK13 OK2026-08-05
NOTE12 OK, 1 NOTE2026-08-01
OK13 OK2026-07-22

Show 7 earlier changesHide 7 earlier changes

NOTE11 OK, 2 NOTE2026-07-16
OK13 OK2026-07-12
ERROR10 OK, 1 NOTE, 2 ERROR2026-06-25
NOTE12 OK, 1 NOTE2026-06-17
ERROR11 OK, 1 NOTE, 1 ERROR2026-06-04
NOTE13 OK, 1 NOTE2026-03-12
ERROR12 OK, 1 NOTE, 1 ERROR2026-03-10

Advisories

none known

How this is measured·How advisories are found

Documentation

In release 4.1.3

READMEYes · 548 wordsVignettesYes · 12 · dynamicNEWSYes · 100% structured · mentions 4.1.3Citation fileNoWebsiteYes · pkgdown

Help pages: 152 (97 internal)includes a package overview page
Examples that run: 5%3 run in a plain check · 2 only when donttest examples are enabled (R CMD check --as-cran) · 51 never run · 1 hold no code
Exported functions with examples: 93%
Documented parameters: 99%
Return-value docs: 100%
Help pages citing references: 0%

Vignettes (12)

Dependency tree HTML
Examples HTML
Generate html risk report HTML
Get available versions HTML
Get package host HTML
Get popularity metrics from CRAN or Bioconductor package HTML
Get pubmed data HTML
Risk Assessment with Custom Configurations HTML
risk.assessr metrics HTML
Security vulnerabilities HTML

Show 2 moreHide 2 vignettes

Traceability matrix HTML
Using Risk Assessment Functions HTML

How these are measured

Downloads

5.6K

CRAN downloads in the past year

Rank #5,687 · ~15/day · ~465/mo

Releases R versions

Daily download trend is not available in this view yet.

65230 days

1.5K90 days

5.6K1 year

Compare downloads with other packages →

Also on114 r2u4 autocran

How downloads are counted

Repository

pharmaverse/risk.assessr ↗Organization: pharmaverse

44Stars

6Forks

6Open issues

0Open PRs

8Releases

81Commits

2Commit identities

License file reads as GPL-2.0 · 81 commits · Last activity 2026-09-30

Responsiveness

How these are sampled

PRs merged (all time): 83%
Median days to close, 50 most recently updated closed issues: 7
Median days to close, 50 most recently updated closed PRs: 2

Forks over time

2026-07-14 · 52026-09-28 · 6

How these are measured

PracticesBeta

10 development-tooling and community-health practices detected across 6 families in the upstream repository

Checks run against github.com/pharmaverse/risk.assessr on 2026-10-22.

Continuous integration (2)

GitHub ActionsR CMD check workflow

The R CMD check workflow runs on Linux, macOS and Windows, and on R-devel

Governance and community (2)

Issue templatesPR template

Docs source (3)

pkgdown

GitHub Pages site last deployed 2026-09-30 · The repository has a site deploy workflow

pkgdown site last built 2026-09-30

Coverage (1)

Coverage reporting

Show all practicesHide 2 practices

CRAN release process (1)

cran-comments.md

Lint, format, editor (1)

RStudio project

How this is detected·Detection ruleset v4 (2026-10-20)

Dependencies

Declared dependencies

39 external dependencies (excludes base and recommended)

Installing risk.assessr adds 74 packages (37 with compiled code, 42 MB of source tarballs). Heaviest: stringi 11 MB, bslib 5.6 MB, sass 2.9 MB.

Depends (1)

R >= 4.1.0

Imports (21)

remotes test.assessr checkmate desc dplyr fsmethodspurrr rmarkdown rcmdcheck rlang xml2 stringr (>= 1.5.0)tidyrtoolsutilscurl jsonlite memoise BiocManager glue

LinkingTo (0)

none

Suggests (21)

devtools forcats here htmltools htmlwidgets kableExtra knitr magrittr openxlsx pkgload R6 S7 readr roxygen2 testthat tibble tidyselect withr mockery ggplot2 DT

Enhances (0)

none

Dependency license breakdown →

Reverse dependencies

0direct

0indirect

Nothing depends on this yet.

How these are counted

Code & Tests

People & History

People (5)

Edward Gillian

Maintainer since 2.0.0 (2025), Author

Author

Author

Author

Copyright holder, Funder

Releases (10)

Pick two releases to compare their code metrics.

4.1.3Latest
record
2026-09-22 · current release · diff ↗ ·
added 1 export
generate_security_vulnerabilities
4.1.2
record
2026-07-16 · diff ↗
4.1.1
record
2026-07-06 · diff ↗ ·
added 2 exports
get_frugal_metrics, get_security_vulnerabilities
4.1.0
record
2026-06-11 · diff ↗ ·
removed 9 exports
check_forbidden_notes, check_suggested_exp_funcs, contains_vignette_folder, create_coverage_skip_stf, map_test, map_tests_stf, run_covr_modes, run_covr_skip_nstf, run_covr_skip_stf
R
R 4.6.0 released · 2026-04-24
3.1.1
record
2026-04-08 · diff ↗ ·
removed 1 export
assess_pkg
3.1.0
record
2026-03-25 · diff ↗ ·
removed 1 export
as_iso_date

added 8 exports
create_coverage_skip_stf, get_package_tarfile, map_test, map_tests_stf, run_covr_modes, run_covr_skip_nstf, run_covr_skip_stf, write_summary_report
3.0.1
record
2025-12-02 · diff ↗
3.0.0
record
2025-11-28 · diff ↗ ·
removed 5 exports
calc_overall_risk_score, calc_risk_profile, create_weights_profile, get_package_download, update_results_doc_scores

added 29 exports
as_iso_date, average_issue_close_time, bioconductor_reverse_deps, build_dependency_tree, check_forbidden_notes, count_commits_last_months, cran_packages, cran_revdep, create_traceability_matrix, dependsOnPkgs, detect_version_conflicts, download_and_parse_dependencies, extract_package_version, extract_thresholds_by_id, extract_thresholds_by_key, fetch_all_dependencies, generate_traceability_matrix, get_commits_since, get_cran_total_downloads, get_host_package, get_package_download_bioconductor, get_package_download_cran, get_pubmed_by_year, get_pubmed_count, get_risk_analysis, get_risk_definition, is_base, list_badges, print_tree
2.0.1
record
2025-08-22 · diff ↗
2.0.0
record
2025-07-10
R
R 4.5.0 released · 2025-04-11

Package metadata

First published: 2025-07-10
Total releases: 10 / 1 yrs
License: GPL (>= 2) OSI
Minimum R: ≥ 4.1.0
Download size: 1.8 MB

Cite

Cite this package

Run in R for the authors' preferred citation:

citation("risk.assessr")

Format

Gillian, E., Sanofi, Bottois, H., Charliquart, P., & Couturier, A. (2026). risk.assessr: Assessing Package Risk Metrics (Version 4.1.3) [Computer software]. https://doi.org/10.32614/CRAN.package.risk.assessr

This package has no citation file, so citation() returns this entry built from DESCRIPTION.

Cite the R Observatory

For a number measured here: a download total, a coverage figure, an archival date.

Format

APA

Balamuta, J. J. (2026). R Observatory: Metrics for risk.assessr version 4.1.3 [Data set]. HJJB, LLC. Data release v2026-10-24. https://doi.org/10.5281/zenodo.21843040

From data release v2026-10-24, which the citation names so these numbers can be found later. More on citing and the projects behind them.

Report a problem with this page →