Skip to main content
2 of 2
included security
  1. Look for anti-patterns.
  2. Lint the code if it has not already been done.
  3. If something looks really strange, talk to the developer before proceeding--maybe they are not ready to have their pull request examined.
  4. Look for hard-coded values that could have been put into environment variables, arguments, or some kind of config file.
  5. Look for security issues (eg: hardcoded passwords, keys in the repo, opportunities for SQL injection attacks, etc).
  6. Look for functions that could have been made more generic and reusable.
  7. Look for silly custom code that does something that a built-in language feature does better.
  8. Check any comments and ensure they make sense.
  9. When referring to someone else's code, be sure to just say "this code" or "the code", rather than "your code"; it's just better etiquette.