This guide outlines the goals, workflow, review content, and practical methods for effective code review, providing a comprehensive checklist to help teams detect issues early, share knowledge, improve code readability, and foster collaborative development.
The article recounts a real‑world incident where a device’s MAC address could not be changed because a previous engineer deliberately disabled the relevant function, discusses the discovery of the backdoor code, and examines the legal and ethical implications of such intentional vulnerabilities.
This article explores how mature testing teams can leverage large language models for automated code review, outlining the advantages, challenges, and a practical implementation using FastGPT and GitLab CI to build a low‑cost, AI‑enhanced review system that improves efficiency and feedback quality.
This article examines how high‑quality code boosts development efficiency, outlines the factors that affect code quality, presents practical strategies such as training, standards, code reviews, automated testing and refactoring, and provides step‑by‑step guidance for integrating metrics and prioritizing them across various project types.
Code reviews are essential for ensuring quality, readability, security, and team collaboration; this guide explains their objectives, importance, standards, step‑by‑step workflow, recommended tools, efficiency tips, and provides practical report templates to help teams conduct effective reviews.
This article examines critical gaps in modern code review processes, highlighting the lack of performance testing, common feedback pitfalls, and practical strategies—including instrumentation tools like Digma—to ensure code quality, system reliability, and efficient collaboration in increasingly complex software pipelines.
This article explains the importance of code review, outlines its core goals and basic principles, provides step‑by‑step practical guidance with a detailed checklist, shares real‑world case studies and code examples, and discusses metrics and future AI‑assisted improvements to help teams improve software quality.
The article showcases a collection of JavaScript snippets—ranging from simple if‑statement drills and password handling tricks to messy loop structures and formatting quirks—illustrating typical beginner mistakes and how to spot and improve them.
This article explains the importance of code review, outlines its core objectives and basic principles, describes practical steps and a detailed checklist, shares several real‑world case studies with before‑and‑after code snippets, and discusses the benefits, metrics, and future AI‑assisted enhancements.
This comprehensive guide explains why code review is essential, outlines its core goals and principles, provides step‑by‑step practices and a detailed checklist, shares five real‑world case studies with before‑and‑after code, and looks ahead to AI‑assisted review tools.
This guide presents ten practical strategies—including IDE selection, static analysis tools, unit testing, code reviews, and learning from others' post‑mortems—to help developers dramatically reduce bugs, improve code quality, and increase overall productivity.
This guide outlines the objectives, workflow, key review items, and practical methods for effective code review, providing detailed checkpoints and a checklist to help teams improve code quality, maintainability, and collaborative learning.
The article describes Vivo's Engineering Efficiency team's VCR platform, built on GitLab and Gerrit, detailing the design and implementation of code‑review plugins, challenges faced, architectural integration, customization techniques, and future directions toward automated and AI‑enhanced code review.
The article shares practical lessons on maintaining code quality and readability amid intense project iterations, emphasizing thorough code reviews, incremental refactoring, and the importance of a shared coding style to prevent technical debt and the broken‑window effect.
This guide explains how embedding a large‑language‑model AI into a CI pipeline can automate code reviews, cut review time, improve consistency and accuracy, and ultimately raise development efficiency and code quality while reducing manual effort and communication overhead.
This article outlines seven common habits of inexperienced developers—such as massive code commits, poor code quality, multitasking, arrogance, ignoring feedback, handling personal matters at work, and chasing trends—and offers practical steps to become a more professional and effective programmer.
This guide outlines twelve critical code review criteria—including correctness, readability, maintainability, security, performance, testing coverage, documentation, exception handling, duplication avoidance, compatibility, and architectural design—to help developers produce high‑quality, robust software.
This article presents a series of B2B testing scenarios—upload validation, rule retrieval, rule‑group matching, and similar rule conditions—demonstrating how targeted code review, precise test case design, and SQL verification can dramatically reduce test effort while uncovering hidden bugs.
This guide walks developers through a comprehensive PHP code‑review checklist, covering functional correctness, code readability, security safeguards, performance tuning, dependency health, and best‑practice tooling to help teams produce clean, safe, and efficient backend applications.
To cut bugs and boost productivity, developers should use a robust IDE, integrate static analysis tools like FindBugs and CheckStyle, run SonarQube and Fortify for quality and security checks, write unit and functional tests, automate regression suites, and regularly conduct peer code reviews.
The article shares a QA engineer’s journey of adopting deep testing—reading code to reduce repetitive cases, improve coverage, and accelerate delivery—while reflecting on challenges, practical techniques, and the long‑term value of this gray‑box testing approach.
This article presents a thorough guide on modern code review, covering its importance, common obstacles, preparation steps, automation tools, good and bad commit messages, mindset, code quality principles, review workflow, and practical tips for overcoming challenges and improving team engineering culture.
This article presents ten practical techniques—including choosing the right IDE, integrating static analysis tools like FindBugs and CheckStyle, using SonarQube and Fortify, writing unit and automated tests, performing incremental code reviews, and learning from others' pitfalls—to help developers dramatically reduce bugs and improve code quality.
This article presents an in‑depth guide on modern code review, covering its significance, core principles, preparation checklists, automation tools, good and bad commit messages, code quality metrics, naming conventions, security considerations, common pitfalls, conflict resolution, and time‑management strategies for development teams.
This article compiles thirty actionable tips that cover the entire software development lifecycle—from technical selection and tooling to CI/CD, monitoring, and knowledge sharing—helping engineering teams dramatically improve collaboration, productivity, and delivery quality.
This article outlines how establishing clear review standards, leveraging object‑oriented principles and SOLID design rules, applying common design patterns, and requiring unit tests can transform code reviews from a perfunctory task into an effective quality‑boosting, knowledge‑sharing practice for development teams.
This article presents 18 practical code review guidelines covering comments, logging, naming, parameter validation, exception handling, modularity, concurrency, testing, formatting, compatibility, security, transaction, idempotency, middleware, code smells, and remote calls, offering concrete examples and best‑practice recommendations for Java developers.
This article reviews the rapid rise of generative AI in 2023 and explores its impact on frontend development, covering AI‑driven code generation, testing, code review, low‑code platforms, business workflows, challenges, practical experiences, and future prospects for developers and teams.
This article shares practical guidance drawn from over a decade of software engineering experience, illustrating common pitfalls such as false delivery, broken promises, and poor communication, and offering structured advice on setting goals, planning, requirement discussion, coding, code review, and documentation to build a trustworthy professional programmer persona.
Drawing on a decade of experience, the article offers a practical handbook for new programmers to become reliable by avoiding common pitfalls—such as false delivery, arbitrary promises, and missed warnings—through weekly goal alignment, disciplined planning, clear requirement discussions, consistent coding standards, thorough reviews, and concise documentation.
This article explains the concept, goals, suitable teams, and step‑by‑step process of Mob Code Review (Mob CR), a collaborative code‑review practice that helps teams establish quality standards, educate newcomers, and improve overall code quality through collective inspection and discussion.
Understanding the seven common behaviors of inexperienced developers—such as massive code submissions, poor code quality, multitasking, arrogance, ignoring feedback, handling personal matters at work, and chasing every tech trend—helps you avoid repeating these mistakes and advance your software engineering career.
When rapid micro‑service development forces rushed code reviews, this article explains how disciplined review, the boy‑scout rule, and incremental refactoring can restore code quality, improve team collaboration, and prevent the “broken‑window” effect in software projects.
The article shares practical experiences and advice on maintaining code quality through disciplined code reviews, incremental refactoring, and team-wide coding standards, emphasizing readability and continuous improvement to prevent technical debt and the broken‑window effect in fast‑moving projects.
This article explores the essential role of Code Review in improving code quality, fostering knowledge sharing, and enhancing team cohesion, offering practical guidance on what to focus on—from naming conventions and comments to architecture, performance, and security—while also discussing reviewer mindsets and cultural adoption.
The article presents a practical permission‑management strategy for a large‑scale front‑end monorepo that merges Git‑hook validation with GitLab’s protected branches and role‑based access, defines a clear directory hierarchy, outlines workflow controls, and explores extensions such as fine‑grained ACLs and file‑access logging to prevent unauthorized file changes.
The article explains how regular code reviews and systematic refactoring techniques—such as using ternary operators, map‑based strategy patterns, findIndex, early condition checks, destructuring, TypeScript utility types, and avoiding magic numbers—can dramatically improve code quality and maintainability for junior frontend developers.
This article outlines a comprehensive strategy for ensuring code quality within monorepo architectures by isolating unit tests via Git submodules, automating test execution in CI pipelines, and enforcing structured code reviews through a configurable Code Owner mechanism to mitigate integration risks.
This article extends the ideas from "13 Years of Coding at Tencent" by presenting a comprehensive set of engineering self‑cultivation principles—including bias, entropy control, test‑driven design, early and automated testing, unified terminology, domain‑driven design, framework decoupling, and disciplined code encapsulation—to help developers write higher‑quality, maintainable code.
The article explains why both engineers and leaders must participate in code reviews, outlines common pitfalls such as duplicated or overly complex code, and provides concrete best‑practice guidelines—including file and function size limits, early returns, and clear logging—to improve code quality and team collaboration.
The article explains AutoDev 1.4.0’s new Team Prompts feature, showing how shared, code‑based prompts enable TDD workflows, living documentation, and integrated code review within IDEs, while also detailing prompt syntax, interaction modes, and open‑source resources for teams seeking AI‑driven productivity gains.
The article examines how rising code volume and AI‑generated snippets challenge traditional code review, proposes an LLM‑assisted workflow using AutoDev and DevOpsGenius, details prompt design, commit filtering, and implementation steps, and discusses the benefits and limitations for different team roles.
The article expands on prior reflections by urging engineers to adopt a paranoid, entropy‑controlling mindset, design for testability, apply domain‑driven design, keep frameworks peripheral, enforce purposeful encapsulation and explicitness, and treat code as a craft, inviting community discussion.
This article presents a detailed front‑end code review guide covering quality, functionality, performance, security, testability, readability, reusability, compatibility, polyfill configuration, and practical testing examples such as Cypress end‑to‑end tests, all organized with clear checklists and code snippets.
This article describes the design and implementation of a code‑review assistant powered by open‑source large language models and a privately hosted knowledge base, covering background, pain points, system architecture, model selection, vector‑store integration, prompt engineering, diff parsing, and practical reflections.
This article presents a detailed front‑end code review guide covering code quality, functionality, performance, security, readability, reusability, compatibility, polyfills, and testing, complete with practical examples, checklist mnemonics, and code snippets for modern JavaScript frameworks.
This article explores front‑end architecture decisions between Vue and React, shares a comprehensive code‑review methodology from 13 years at Tencent, evaluates the most robust local storage solutions for large offline data, details two screen‑adaptation approaches for Vue 3/Vite, and introduces emerging technologies such as LangChain’s RAG and Agents and the high‑performance Bun 1.0 JavaScript runtime.
This article reviews a production incident caused by a simple log statement, reconstructs the scenario with a CountryDTO example, analyzes FastJson's ASM‑based serializer internals, explains which getter/is methods are invoked during serialization, and proposes annotation‑driven coding standards to avoid similar bugs.
Effective code review bridges design and implementation by focusing on concrete Go code, enforcing limits on file and function size, nesting depth, and duplication, while promoting early returns, composition over inheritance, clear package structure, and disciplined formatting to prevent hidden technical debt.
Effective software delivery relies on clear, tool‑appropriate communication, data‑driven decision making, rigorous requirement validation, disciplined documentation, readable code with consistent naming and concise commits, fast code reviews, diverse cross‑team testing, swift incident mitigation and reflective post‑mortems, fostering sustainable growth through continual good habits.
The author shares personal experiences of rushed code reviews in a busy Java micro‑service team, highlights the loss of code ownership, discusses common code smells, and explains how disciplined reviews and incremental refactoring can restore readability and maintainability.
This article explains how to secure PHP web applications by performing code reviews, validating user input, preventing SQL injection and XSS, and using security testing tools such as PHP Security Scanner, OWASP ZAP, and Kali Linux, along with practical testing methods like boundary, authorization, and exception handling.
This article outlines a comprehensive approach to controlling and enhancing code quality in development teams, covering common issues such as delayed static analysis, ineffective code reviews, inconsistent branch management, unclear commit messages, and low technical morale, and proposes practical workflow, tooling, and governance solutions.
In a fast‑paced microservice project the author shares how rushed code reviews lead to loss of ownership, describes the "boy‑scout rule" and broken‑window effect, and offers concrete refactoring practices and resources to continuously improve code quality across a team.
The author reflects on rushed code reviews during intense development cycles, explains how neglecting thorough reviews leads to loss of code ownership, and advocates systematic reviews, continuous refactoring, and clean‑code practices to maintain project health and improve team collaboration.
This article explains how thorough code review, using tools like GoLand, Git plugins, and Postman, improves test case accuracy, data integrity, branch coverage, and overall software quality in Go projects, while offering practical tips on diff usage and highlighting the tangible benefits for testing teams.
This article presents a systematic approach to improving code quality across the software development lifecycle, covering traceability between tasks and commits, early static analysis, efficient code review, disciplined branching strategies, commit‑message enforcement, and fostering a collaborative technical culture.
This article outlines comprehensive code review guidelines, covering principles, optimal timing, scope of evaluation, detailed review criteria such as functionality, complexity, testing, naming, documentation, and offers strategies for handling conflicts and maintaining long‑term code quality within development teams.
Baidu's DuoLiXiong platform, a SaaS suite for local services, achieves stability through comprehensive technical and business specifications, microservice best practices, rigorous code reviews, automated monitoring, eventual consistency, idempotency, and future automated scaling and intelligent fault tolerance for critical operations.
This article walks through creating a GitLab code‑review bot that leverages the ChatGPT API, detailing request handling with Axios, constructing prompts, interacting with both ChatGPT and GitLab APIs, and posting automated review comments back to merge requests.
This article presents five practical version‑control best practices—including choosing an appropriate branching strategy, making frequent small changes, writing descriptive commit messages, using branches for development, and conducting regular code reviews—to help development teams collaborate more effectively and deliver business value faster.
Linus Torvalds opened the Linux 6.3 merge window and sharply criticized numerous pull requests lacking clear log messages, calling them garbage and urging developers to always explain their changes, warning that undocumented merges clutter the code history and hinder readability.
This guide explains why code review is essential, outlines practical guidelines for reviewers and submitters, shares real‑world practices from leading companies, and highlights common code smells such as DRY, primitive obsession, lock misuse, and pagination problems, helping teams improve code quality and maintainability.
The article shares a senior architect's insights on why engineers and leaders must perform code reviews, how to avoid common pitfalls such as duplicated code, premature optimization, over‑encapsulation, and lack of design, and provides concrete best‑practice guidelines and Go code examples to improve software quality.
The article explains static testing concepts, the role of code inspection and reviews, the advantages and limitations of automated code scanning tools, and provides a practical guide for integrating SonarQube into a development workflow to improve code quality and enforce testing standards.
This comprehensive guide explains why code review matters, shares real‑world practices from leading companies, outlines concrete steps for submitters and reviewers, warns against common pitfalls like DRY violations and poor pagination, and offers actionable tips to make reviews effective and sustainable.
This article offers practical guidance for developers to enhance code quality by recommending essential books, outlining JDK and framework source‑code study paths, and emphasizing the importance of code reviews, while also highlighting useful tools and resources for Java backend engineers.
Elon Musk visited Twitter’s headquarters for a code review, shared a group photo and detailed diagrams of the Timeline Mixer and Home Mixer components, highlighted performance and advertising insights, and sparked discussion with simplified and historical architecture comparisons, while also promoting a backend tech community and Java interview resources.
This article explores how effective code reviews foster teamwork, improve code quality, and accelerate developer growth by setting clear goals, focusing on constructive feedback, asking probing questions, mentoring wisely, and keeping review sessions concise and engaging.
This article outlines ten common developer missteps—from hoarding knowledge and skipping code reviews to weak testing and undocumented changes—and explains how avoiding them can transform you into a high‑value software engineer.
This article introduces several Java code‑quality tools—including Alibaba Java Coding Guidelines, CheckStyle, PMD, FindBugs, and SonarLint—explaining their purpose, installation steps, key features, and how they can improve code review efficiency and overall code health.
This comprehensive guide outlines front‑end development standards—including naming conventions, technology‑stack choices, programming rules, Git workflow, BFF design, front‑back collaboration, IDE settings, testing strategies, and documentation—to improve code maintainability, team efficiency, and project quality.
This article presents a comprehensive guide to using Subversion (SVN) for multi‑branch version control, covering branch management, daily development cycles, hot‑fix procedures, conflict resolution, and step‑by‑step setup and merge operations to streamline development and testing workflows.
The team resolved export failures caused by a deprecated cloud‑storage middleware by adding a new method that generates user‑specific sub‑paths and saves files, but recognized security, configurability, and maintainability issues, recommending configurable buckets, thorough permission reviews, and reusable design when migrating third‑party dependencies.
This article outlines comprehensive guidelines for keeping customers happy, managing projects, designing robust APIs, conducting thorough code reviews, shaping strategic direction, ensuring observability, and fostering research, all aimed at building resilient and high‑performing engineering teams.
This article reveals ten little‑known Python security pitfalls—from optimized‑away asserts and directory permission quirks to URL parsing quirks and Unicode normalization issues—explaining each flaw, its impact, and how to mitigate it, helping developers safeguard their code.
This article explains why technical leaders must establish robust code quality assurance mechanisms—covering static analysis, unit testing, code reviews, defect tracking, automation, and release checks—to reduce manual effort, prevent production issues, and ultimately accelerate delivery while fostering developer growth.
This guide defines technical debt, outlines its classification into vulnerabilities, bugs, and code smells, and presents clear objectives, principles, standards, evaluation rules, recommended practices, and metrics to visualize, assess, and systematically reduce debt, thereby improving project delivery efficiency.
This guide explains why systematic code reviews improve software quality, uncover deep design flaws, enhance security, and foster continuous learning among developers, while outlining clear goals, principles, review criteria, best practices, and measurable metrics for successful implementation.
A developer discovers a nearly 2 GB Java WAR file packed with an old JDK and a game, learns how a careless SVN commit caused deployment nightmares, and later confronts poor coding practices and naming conventions that highlight the need for proper environment setup and rigorous code reviews.
Explore a curated set of frontend development articles covering the evolution of asynchronous JavaScript with Promises and async/await, best practices for code reviews, handling race conditions in React, establishing comprehensive frontend standards, the quirks of JavaScript's with statement, and advanced webpack splitChunks and manifest optimization techniques.
This article explains why concurrency issues like overselling occur in e‑commerce, introduces distributed lock concepts and mainstream implementations (MySQL, Redis, Zookeeper/etcd), and provides a three‑stage quality‑assurance framework with code‑review checklists, testing methods, and data‑reconciliation techniques.
This article explains the critical importance of managing software dependencies, outlines the risks of blindly using external packages, shares lessons from a Golang mob code‑review session, and provides practical guidelines for selecting, using, and monitoring dependencies in modern development.
The article presents a series of JavaScript ES6 code‑review critiques, explaining why older ES5 patterns are problematic and demonstrating modern ES6 alternatives such as destructuring, spread operators, template literals, optional chaining, async/await, and array methods with clear code examples.
Mob CR, short for Mob Code Review, is a team‑oriented, five‑step process that uses collective code inspection to establish shared quality standards, educate newcomers, and align developers on better design and implementation practices.
This article examines why developers produce low‑quality code, describes typical symptoms such as unreadability and excessive nesting, outlines the long‑term costs and risks of bad code, and presents expert‑recommended practices—including code reviews, design documentation, technical debt repayment, and disciplined development processes—to improve code quality.
The author recounts a failed Go pull‑request, detailing overflow bugs, missing tests, improper commit messages, and how proper code review practices can turn a buggy contribution into a successful merge.
This article explains defensive programming for front‑end developers, covering its definition, the three pillars of prevention, correction and direction, common UI and code crisis points, detailed code‑review checklists, CSS defensive rules, and responsive design considerations to build resilient, user‑friendly applications.
This article translates Mahesh Balakrishnan’s 42‑point guide on building production databases, covering customer focus, project management, design principles, code review practices, strategy, observability, and research, offering concrete advice for engineers and teams creating robust backend systems.
This article outlines ten lesser‑known Python security pitfalls—from optimized‑away asserts and directory permission quirks to path traversal, regex misuse, Unicode normalization attacks, and IP address normalization—illustrating how subtle language features can lead to serious vulnerabilities in real‑world applications.
The article explains how GitHub pull requests, while useful for reviewing external contributions, introduce performance and feedback delays compared to continuous integration, and proposes faster CI‑driven workflows and alternative code‑review practices such as pair programming, scheduled reviews, and pipeline approvals to maintain quality without sacrificing speed.
The article humorously showcases a series of poorly written code examples—from magic numbers and overly long variable names to emoji variables and convoluted switch statements—offering developers reflective commentary on common pitfalls and encouraging better coding practices.
Youzan boosted mobile product reliability by instituting proactive anomaly detection, rigorous unit‑testing and CI, a disciplined betterMR review workflow, and dedicated performance monitoring to meet offline and hardware constraints, cutting incident volume to one‑third and fostering a virtuous cycle of stability and team morale.
This article explains how systematic code review—covering language familiarity, functional understanding, architecture analysis, interface security, branch completeness, logging, asynchronous risks, performance optimization, and coding standards—helps game developers detect bugs, improve reliability, and maintain high‑quality server code.
The article explains why high‑quality code boosts product and developer success, lists practical practices such as style standards, meaningful naming, testing, CI, reviews and pair programming, and recommends tackling improvements in three stages—first delivering business functionality, then enhancing readability, and finally reducing complexity.
This article outlines 13 essential code review standards that help improve software health, ensure quality, accelerate feedback, foster learning, and maintain a collaborative, respectful review process for developers while also addressing conflicts, testing requirements, and UI demonstrations.
This article explains why developers and leaders must practice thorough code reviews, outlines common pitfalls such as duplicated code and premature optimization, and shares concrete Go examples and timeless engineering principles—like KISS, composition over inheritance, and transparent design—to help teams build maintainable, high‑quality software.
The article outlines seven common behaviors that reveal a programmer’s lack of experience—such as massive one‑off commits, poor code quality, multitasking, arrogance, ignoring feedback, handling personal matters at work, and chasing every tech trend—and offers practical steps to become more professional and productive.
Understanding the seven common habits—such as massive code commits, poor code quality, multitasking, arrogance, ignoring feedback, handling personal matters at work, and chasing every tech trend—helps developers recognize unprofessional behavior and adopt practical strategies to improve productivity and advance their software engineering careers.
The article outlines ten actionable strategies—optimizing iteration speed, relentless automation, building proper abstractions, rigorous code reviews, fostering respectful environments, shared code ownership, investing in automated testing, allocating 20% time, cultivating continuous learning, and hiring top talent—to create a thriving engineering culture.
