Developer risk management