Code Review
Perform a systematic code review covering these categories:
Review Checklist
- Correctness
-
Logic errors, off-by-one, null/None handling
-
Edge cases: empty inputs, large inputs, concurrent access
-
Error handling: are exceptions caught and handled properly?
- Security
-
Input validation and sanitization
-
SQL injection, XSS, command injection
-
Secrets in code, hardcoded credentials
-
Authentication and authorization checks
- Performance
-
Unnecessary loops, N+1 queries
-
Missing indexes for database queries
-
Large memory allocations, unbounded collections
-
Blocking calls in async code
- Style & Maintainability
-
Naming clarity (variables, functions, classes)
-
Function length — split if >30 lines
-
Dead code, commented-out code
-
Missing type annotations
- Testing
-
Are new code paths covered by tests?
-
Are edge cases tested?
-
Are error paths tested?
Output Format
For each issue found:
-
File:line — category — description — suggested fix
-
Severity: critical / warning / suggestion