developer risk