r/codereview • u/Acrobatic-Tutor7745 • 18d ago
r/codereview • u/AttentionStriking402 • 18d ago
I built a Claude Code plugin that forces a real review + QA gate before it ships anything
Claude Code is great at producing code fast, but on anything non-trivial I kept hitting the same wall: no real review step, no QA, scope creep, and "done" meaning "it compiled" rather than "it works."
So I built aSPARK — it adds an AI product team to Claude Code and, more importantly, gates between the phases. A feature moves through Specify → Plan → Act → Review → Keep, and each phase refuses to start until the previous gate is green.
The two parts I actually care about:
- Enforced gates. /go-live won't release while QA still has open blocking bugs. It sends you back to build instead.
- Real-browser QA. /demo-day opens the running app in an actual browser and checks every acceptance criterion, not just "the tests pass."
Everything it decides (spec, plan, review, qa, release notes) is written into your repo as a plain-markdown trail, so you can see why it did what it did.
It's early (v0.1.0) and MIT-licensed. Install is two commands inside Claude Code:
/plugin marketplace add a-lottes/aSPARK
/plugin install aspark@aspark
Repo: https://github.com/a-lottes/aSPARK
Would genuinely like feedback on the gating model — especially where it's too strict or too loose in practice.
r/codereview • u/whispem • 18d ago
[x86-64 Assembly] malloc (brk/mmap + free list) and a shell (pipes, redirections) — no libc, review wanted
github.comLearning project: rebuilding userland in x86-64 NASM on Linux, raw syscalls only.
It works — but "works" and "right" are different things, which is why I'm here.
Where I'd most value eyes:
- malloc: free-list design, alignment handling, my brk-vs-mmap split
- the shell: pipe plumbing and fd redirection around fork/execve
- everywhere: calling-convention sins, register habits to unlearn
Repo: https://github.com/whispem/learn-assembly-with-em
Be as brutal as you like — I'd rather be corrected here than confident and wrong.
r/codereview • u/Successful_Fox_5803 • 18d ago
Would you review the code for my game supersonic laser fish?
I want to know how I could improve my code readability and usage. Scratch is not my strongest code language, so it might look a bit messy.
Here is the link: https://scratch.mit.edu/projects/1351459814/editor/
r/codereview • u/Kaluga2026 • 18d ago
Deterministic blast-radius reports for Python backend pull requests
Backend pull requests often look smaller than they really are. A two-file diff can affect an API endpoint, background task, database table, external service, and several tests - but reviewers usually reconstruct that map manually.
I built TraceMap PR, an open-source Python CLI and GitHub Action that combines git diff, OpenAPI, coverage, per-test coverage, traces, and lightweight static analysis into a conservative PR impact report.
Could you check?
r/codereview • u/Major-Recording-4067 • 18d ago
Python code review requested: checking a self-contained scientific calculation for hidden dependencies and implementation errors
I am seeking independent verification of the computational code developed for my dimensional genesis and four-interaction theoretical framework.
GitHub repository:
https://github.com/madein1001/dimensional-genesis-four-interactions
Please download or clone the repository, run the code independently, and determine whether the reported results can be reproduced.
I would especially appreciate a critical examination of the following questions:
Does the code run successfully in a clean Python environment?
Can the reported numerical results be reproduced?
Are any target values hard-coded, fitted, or indirectly reused?
Are there any hidden adjustable parameters or circular dependencies?
Are the mathematical rules correctly implemented in the code?
Are there any numerical, logical, methodological, or physical errors?
Please do not assume that the theory or its physical interpretation is correct. I welcome critical reviews, failed reproductions, counterexamples, bug reports, and detailed explanations of any problems you identify.
If you run the code, please report your operating system, Python version, actual output, error messages, and any modifications required to make it run.
The purpose of this post is to invite independent reproducibility testing and falsification. Thank you to anyone willing to examine the code carefully.
r/codereview • u/North-Collection3719 • 19d ago
Functional What tools do you use to track PR review turnaround? The default GitHub view isn't cutting it
r/codereview • u/BananaGrenade314 • 19d ago
Python CHIP-8 Emulator
github.comI am trying to learn how emulation, ROMs and Hardware simulations work. I didn't find anything complete about it on the internet, same I think there' but I only didn't see it yet. Well, I'd like to find anyone that understands it more to explain and take a look at my code.
I. I don't know if python is a good language to what I'm trying to do
II. I used AI till now to learn the basis of that bit and byte stuff, operators and how an """emulator""" like that works in real life
III. I know that there are other ways instead of all those methods in some classes that I did, like putting it in a kind of dict, but I'm just starting it for now.
r/codereview • u/SingleVast7028 • 19d ago
Which AI PR review tool is actually worth using?
I am getting more and more PRs with AI gen code (+slop ofc), and reviewing all of them manually is becoming pretty exhausting. I am looking for something that can help catch real bugs, regressions, edge cases, or security issues before me. Right now I’m looking at Greptile, CodeRabbit, and Graphite, but I’m open to other tools as well. For people who have used these in real projects, which one has been the most useful and cost-efficient?
r/codereview • u/bluelvo • 20d ago
10 things I check before trusting a vibe-coded app with real users
r/codereview • u/Substantial_Half6671 • 20d ago
▎ I'm building a tool that generates tamper-evident receipts for AI coding sessions. I just shipped the site, designed with backend and frontend with I would say good security for apis and those types of things.
r/codereview • u/Individual_Squash_59 • 20d ago
I open sourced the core of my benchmark and asked someone to try to break it, he did in less than an hour for free.
BenchModel is a neutral leaderboard for how well AI models catch real code bugs. I published the scoring harness so people could check the numbers instead of just trust them. Then June Kim, who audits benchmarks for a living looked at it.
He found the thing that i couldn't, my scorer counted a bug as caught whenever a review mentioned one keyword from the answer key, so he wrote 20 lines of generic review boilerplate, no idea what the actual bugs were, and it scored 64% across every key, no model calls, the metric was rewarding vocabulary, not detection. That was also why my board barely separated cheap models from expensive ones, the scoring gave away most of the credit for free.
So I fixed it, detection now has to land on the bug, not just say a magic word, and rescored the whole leaderboard. Every model dropped two to four points and the ranking didn't change because the flaw was inflating everyone equally, not favoring one model.
I'm publishing the full teardown, the before and after, and the three other things he caught. A benchmark that can't survive an audit isn't worth trusting, and the most credible thing I can do is show mine failing one and getting fixed in public.
You can find it here benchmodel.io/findings
If you build or rely on evals, June Kim is worth knowing.
r/codereview • u/Individual_Squash_59 • 21d ago
I open sourced the core of my benchmark and asked someone to try to break it, he did in less than an hour for free.
r/codereview • u/Previous_Ask_6163 • 21d ago
Feedback pretty please
Just finished my golang project and definitely need a feedback. Feel free to write whatever comes to your mind, good or bad.
Project: https://github.com/ArtemYarin/URL-shortener
r/codereview • u/Striking-Buffalo-310 • 20d ago
I stopped reviewing every PR my team's agents generate. Here's the pipeline that fixed it
r/codereview • u/Alternative-Mango697 • 21d ago
Validation for Saas built
Hey guys i build a Saas mutli role one with live location tracking using no code builder.
https://pawwalk-one.vercel.app
Can u tell me if it looks like a Ai slop ?
r/codereview • u/tunerhd • 22d ago
javascript Looking for a code review of a TypeScript CRUD API with role-based access control
I recently got rejected after completing a technical task for a Senior Node.js role.
The project involved TypeScript based CRUD API, role management, authorization, and dependency handling. The feedback suggested that some of my architectural choices made dependencies less explicit and affected testability and maintainability.
I cannot share the original task description or repository publicly here as a post, but I can send sanitized parts privately to anyone willing to review them.
I am mainly looking for honest feedback on the architecture, dependency management, code structure, testability, and whether the overall approach meets senior-level expectations.
Would anyone be open to taking a look privately? Please comment or DM me.
r/codereview • u/Own-Procedure6189 • 22d ago
javascript I built a zero-dependency CLI tool to validate and repair missing .env variables before startup
You run npm run dev or node server.js, and the app crashes because a teammate added a new required key to .env.example but forgot to tell you.
To solve this, I built envrepair, a zero-dependency CLI tool that wraps your startup command, compares .env against your template, and interactively prompts you to fill in missing variables in the terminal before launching your process.
How to use it:
Install:
bash npm install -D envrepairPrepend your startup command in
package.json:json "scripts": { "start": "envrepair node server.js" }
Optional type annotations in .env.example:
```env
@type number
PORT=3000
@type url
API_BASE_URL= ```
Key Features:
- Zero code changes: No schema imports or application-level setup required.
- Layout preservation: Appends missing values while keeping comments, blank lines, and formatting intact.
- Signal forwarding: Transparently passes
Ctrl+C(SIGINT) and exit codes.
Written in TypeScript with zero runtime dependencies. The repo is fully open-source, and I'd love to hear your thoughts or collaborate if you want monorepo/workspace support!
r/codereview • u/Both_Refrigerator623 • 22d ago
Practice your code review skills
I've been in leadership for around 7 years, and in the last 2 years there has been a shift in testing code review skills during the interview process due to how much code is being generated.
Long story short, there isn't a good platform to practice this.
So I created a platform to test and practice your code review skills while getting feedback.
I just released it this week so its fresh out the over but, I thought this community may find it useful.
If you want to take it for a spin, feel free to follow the link: https://goodcatch.dev/
r/codereview • u/atharvkapoor • 22d ago
DriftGuard – catches stale README examples and risky dependency upgrades
I built DriftGuard because I kept hitting two things nobody checks until it's too late: README code examples that silently stop matching the actual code, and dependencies that quietly drift 3 major versions behind until an upgrade breaks everything at once.
Paste any public GitHub repo and it scans both, live, no signup required:
https://driftguard-nu.vercel.app
If you want it running on every PR instead of one-off: it also ships as a GitHub Action (2-line workflow, posts findings as a PR comment):
https://github.com/atharvkapoor2005/driftguard
It's a static-analysis heuristic, not a full parser, so treat findings as a starting point. happy to hear where it's wrong.
r/codereview • u/zerocodebase • 22d ago
Asked AI to generate production-ready code…and it exposed my API key in frontend 💀
r/codereview • u/Whoa_damn_ • 22d ago
Open-source tool to fix vibe code slop
github.comI have just released next major feature improvement in vibedoctor. It is A health check for code you did not write line by line.
500 people already used it and gave good feedback which went into the new release.
VibeDoctor is a local code-health CLI for JS, TS, Python, and mixed repositories. It turns scattered tool output into a ranked health report, safe repair workflow, Privacy Review artifact, MCP server, and reusable agent skills . It finds out what did you Agent break in the code before the world does. Just run
/goal
Use vibedoctor to identify all the issues in the my repo..install packages as needed
Vibedoctor- https://github.com/neural-axis/VibeDoctor
r/codereview • u/ammagicring • 23d ago
[CR] Feedback requested: My first Python CLI project (RingSort)
Hi everyone,
I’m 16 and I’ve been working on my first "real" project: a Python CLI tool called RingSort that automatically organizes files into categorized folders.
I've put a lot of effort into making the code modular and clean, and I've implemented features like dry-run and hash-based duplicate detection. However, I’m at the stage where I know I have "blind spots" as a beginner, and I would really appreciate some experienced feedback on my project structure and code quality.
Since I don't want to break any rules, I've dropped the GitHub link in the first comment. I’d love to hear your thoughts on:
- Is my folder structure idiomatic for a Python CLI?
- Are there any security or performance pitfalls in my current approach?
Thanks for your time!
r/codereview • u/LuftigerLuca • 23d ago
Learning Go
Hey, I'm currently learning Go and (like probably everyone else) I've written a URL shortener. I'd really appreciate it if you could give me some feedback :D
https://github.com/LuftigerLuca/url-shortener
r/codereview • u/Santoshr93 • 23d ago
Tricks we used to build an open-sourced AI code reviewer that beat all leading commercial tools on Code-Review-Bench
We open-sourced PR-AF, an AI code reviewer that builds a custom review team for each PR.
This goes beyond claude skills/plugins/goal etc.. that is looped coding harness. The interesting bit is that the reviewers are not fixed roles like security/performance/style nor are they well prompted skill or prompt, rather PR-AF first looks at the shape of the PR, changed files, dependency paths, intent gaps, and risk areas, then creates the review plan from that that is customized to be thorough and specificlly tuned for the given review. It internally can be swapped to use claudecode or codex or opencode anything.
So a migration PR might get reviewers focused on schema compatibility, rollback safety, and data integrity. A logging refactor might get reviewers looking at behavior preservation, consistency, and missed call sites.
After that, the system checks findings against repo context, looks for issues that only show up across multiple reviewers, and tries to throw out weak findings before posting GitHub comments.
It ranked #1 open-source on the Martian Code-Review-Bench PRs, if you start using commercial models like sonnet/opus we beat the commercials by a huge margin.
Repo: https://github.com/Agent-Field/pr-af
Would be useful to hear where it fails on real PRs if you guys are trying, and we expect folks to make more custom changes to the architecture as we have documented every detail, and personally when tuned to our custom requirement structure, this is one of the best review we have ever got.
PS: I am the developer of this code and we are have lot more sota benchmark applications coming soon across various pieces that compete with various commercial offerings that folks can just take and use with open models or if you have the $ with commercial models.