scar-code-review

What this does

A code review system that learns from its own misses. Two layers work together:

1. Checklist review — Regex/heuristic checks across 4 dimensions:

   • Security: SQL injection, hardcoded secrets, XSS, eval/exec
   • Performance: N+1 queries, missing pagination, unbounded SELECTs
   • Correctness: Unchecked nulls, off-by-one patterns, unhandled promises
   • Maintainability: Long functions, deep nesting, magic numbers

2. Scar reflex arc — Pattern-matching against past review misses. When a review fails to catch a bug that later causes an incident, record a scar. Next time, the reflex fires before the LLM even looks at the diff.

No external dependencies. stdlib only. Python 3.9+.

Quick start