This workshop examines risk assessment for R packages with risk.assessr, connecting package metrics with validation and remediation decisions. Participants explore important indicators such as R CMD check results and test coverage, together with additional information including documentation and popularity. The session also covers reporting and how risk assessment results can be used within validation processes. A practical discussion addresses situations in which an objectively calculated score is lower than desired but the package remains necessary for the intended work. The workshop helps participants consider how evidence, reporting, and remediation contribute to a reasoned approach to package risk evaluation.