Software-update risks can be mitigated for end users by implementing some examples described herein. In one example, a system can receive an indication that an end user used a particular feature of an existing version of a software application on a computing device of the end user. The system can also determine that an update for the software application includes a code change to the particular feature. The system can generate a risk score for the update based on the code change. The system can then generate a graphical user interface indicating the risk score for the end user. This may assist the end user in determining whether to apply the update to the existing version of the software application.