Code Review
Perform a systematic code review covering these categories:
Review Checklist
1. Correctness
- Logic errors, off-by-one, null/None handling
- Edge cases: empty inputs, large inputs, concurrent access
- Error handling: are exceptions caught and handled properly?
2. Security
- Input validation and sanitization
- SQL injection, XSS, command injection
- Secrets in code, hardcoded credentials
- Authentication and authorization checks
3. Performance
- Unnecessary loops, N+1 queries
- Missing indexes for database queries
- Large memory allocations, unbounded collections
- Blocking calls in async code
4. Style & Maintainability
- Naming clarity (variables, functions, classes)
- Function length — split if >30 lines
- Dead code, commented-out code
- Missing type annotations
5. Testing
- Are new code paths covered by tests?
- Are edge cases tested?
- Are error paths tested?
Output Format
For each issue found:
- File:line — category — description — suggested fix
- Severity: critical / warning / suggestion