All About Code Review

This is a curated collection of articles, tools, checklists and other awesome resources about code reviews.

Contributions welcome - especially highlighting how different companies do code reviews.

If you want to suggest a new ressource, please open a pull request.

Contents

• Company Insights
• Code Review Articles
• Code Review Tools
• Code Review Videos
• Code Review Checklists

Company Insights

Inisghts of different companies on their code review practices:

• Facebook: Scaling Static Analyses at Facebook
• Google: Focusing on fast code reviews
• Google: Code review guidelines
• Microsoft: Understanding code review best practices
• Netlify: Feedback Ladders to encode review feedback
• New Relic: Creating Simple and Effective Guidelines for Code Reviews
• Palantir: How we do code reviews
• Quora: Using post-commit reviews to increase speed.
• PayPal's take on code reviews

Code Review Articles

This is a list of articles about code reviews grouped by the main topic.

• Do's and Don'ts in Code Reviews
  • Satirical post about how to make code reviews soul crushing
• Giving and Receiving Feedback
  • Code Review Guidelines for Humans
  • How to Do Code Reviews Like a Human by Michael Lynch
  • How to Give Respectful and Constructive Code Review Feedback
  • Unlearning Toxic Behaviors in a Code Review Culture by Sandya Sankarram A how-to guide for pull requests via how-not-too.
• Stacked Pull Requests:
  • Stacked Diffs: Keeping Phabricator Diffs Small by Kurtis Nusbaum
  • Stacked Pull Requests for easier and faster code reviews by Michaela Greiler
  • Stacked Pull Requests: Keeping GitHub Diffs Small by Grayson Koonce
  • Stacked Pull Requests Hackernews Discussion
• Truck-based Development and Code Reviews:
  • Code Reviews in Trunk Based Development by Robert Ecker
• Bias in Code Reviews
  • Facebook rejects female engineers’ code more often, analysis finds
  • Did gender bias drive code review differences at Facebook?
  • [Research study: Gender bias in open source pull requests]https://www.researchgate.net/publication/308716997_Gender_bias_in_open_source_Pull_request_acceptance_of_women_versus_men)

Interesting Twitter Discussions

• What do we know about the ROI of code reviews?
• Discussion about PR foucs: Clean code not good. Bugs much better.
• AWS team lead summarizes how to do PRs
• Mini JavaScript Code Reviews in a Tweet from Simon Høiberg
  • What to do about the average function?
  • Should we approve or reject?
  • Clean refactoring?
  • What about this DOM element?
  • Using the filter method in JavaScript

Code Review Videos

• 10 Tips on How to give respectful code review feedback by Michaela Greiler
• Amazing Code Reviews: Creating a Superhero Collective by Alejandro Lujan for GOTO 2019

Code Review Tools

• Crucible Atlassian's on-premise code review tool.
• Codacy Static analysis tool that acts as automated code review.
• CodeGuru: Amazon's AI enabled automated code analysis tool.
• CodeStream Code Collaboration Tool that allows for continious code reviews.
• Gerrit Open source git code review tool originating out of Google.
• GitHub Git hosting and pioneer of the "Pull Request".
• Gitpod Code review pull requests in a full IDE within your browser.
• GitRise Slack Reminders for GitHub pull requests
• Kiro GitHub app that is your PR coach: review reminder and reviewer selection.
• LGTM Automated Git code review for GitHub and Bitbucket pull requests for finding security vulnerabilities and code quality issues.
• Phabricator Open source git/mercurial/svn code review tool originating out of Facebook.
• PullRequest Code review as a service for GitHub pull requests.
• Pull Reminders Automated Slack reminders and metrics for GitHub pull requests.
• Reviewable Code review tool built on top of GitHub pull requests.
• Review Board Open source review tool that is SCM/platform neutral.
• Rubberduck Browser extension to adds code-aware navigation to GitHub pull requests.
• Sider Automated code review service for GitHub.
• Softagram Automated code change visualization (and dependency analytics) for pull requests, merge requests (GitLab) and patch sets (Gerrit).
• SonarCloud Detect code smells, bugs and vulnerabilities in Azure DevOps, Bitbucket and GitHub repositories.
• TugBoat Builds and deploys each pull request for easier previews of the code under review.
• Upsource JetBrain's on-premise git/mercurial/perforce/svn code review tool.

Experiemental tools

This section contains experiemental or small but handy bots that aim at making your live easier during code reviews.

• Prout: Deploy Reminder that reminds you that your pull request has been deployed in production and is ready to be tested.
• CodeSandbox CI bot builds and deploys every pull request to allow code reviewers to see the code change in action.

Code Review Checklists

• A curated list of code review checklists Contains code review checklists from General to Language-based (Java, C# etc.)
• General Code Review Checklists A language agnostic code review checklist containing all relevant aspects.
• 30+ items for Reviewing Java Code A checklist with concrete examples, covering aspects relevant to object-oriented programming.
• Frontend pull request checklist This a meta checklist that makes sure you have done all necessary checks before your frontend code goes through a pull request.

Developer Discussions about Code Review

• Discussion on UX of Goodle Critique and other code review tools

Live Code Reviews

• Code Review on YouTube for Python

Losses due to low-quality software and technical debt

• Security upgrades by major banks in wake of Russian cyber hacks spark IT glitches and crash mobile banking
• Millions more bank customers hit by online account misery
• Traders switch to rival after IT bug downs London Stock Exchange
• Frequent Software Releases, Updates May Injure App Security