SShortSingh.
Back to feed

Small Diffs and Fast Turnarounds Make Code Reviews Effective, Engineering Guides Say

0
·1 views

Many code reviews are rubber stamps, with large pull requests sitting unread for days and then merging on superficial approvals. Google's engineering documentation and peer-review research indicate that reviews only catch defects when changes are small and feedback arrives quickly. Reviewers reportedly should cover under 400 lines per session and limit sittings to about an hour, while authors should split large changes into smaller, independently testable pieces. Google also suggests reviewing within one business day, approving changes that clearly improve code health even if imperfect, and framing feedback as questions rather than directives. The guidance emphasizes time-to-first-response as the key metric over comment counts.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Claude Code Can Now Run on Local or Cloud Models via Ollama on Windows

A developer has published a guide showing how to run the Claude Code terminal coding agent with models served by Ollama instead of Anthropic's accounts. The setup requires Node.js for installing Claude Code, the Ollama app on Windows, and a local model chosen from Ollama's list, such as the small qwen3.5:0.8b used in the example. Local models keep prompts and code on the user's machine but depend heavily on hardware and model size. For more capable models, Ollama's cloud options can be used after signing in, though these send prompts to Ollama's servers and have usage caps.

0
ProgrammingDEV Community ·

Live Supabase service_role keys found committed in public MCP config files on GitHub

A security researcher scanned public GitHub repositories for MCP configuration files that contain database credentials. After decoding and verifying candidate matches, 12 files were found to hold real service_role keys, which bypass row-level security and grant full database access. Four of the associated Supabase projects were still live at the time of the scan, one of them pushed the same day. The author argues that developers treat .mcp.json files like editor settings rather than secret stores, and that the ecosystem lacks the secret-scanning safeguards that .env files have. The researcher recommends rotating exposed keys and moving them into runtime environment variables, and has released free local auditing tools for these configs.

0
ProgrammingDEV Community ·

QuietQueue groups small chores into time-boxed plans using an on-device open-weight model

QuietQueue is a new open-source, browser-based app that turns a list of scattered to-do items into a short session of related tasks within a chosen time budget and energy level. An optional on-device AI, built on the open-weight MiniLM sentence-embedding model via Transformers.js, groups tasks by meaning, while a deterministic planner enforces the time and energy limits. The app does not send messages, book anything, or carry out the tasks themselves, and task text stays on the user's device. The project was built for a Hacktoberfest challenge and its code is MIT-licensed, with dependencies and model weights retaining their own licenses. The developer notes that the implementation and tests were produced by an autonomous AI assistant, and that the app has limitations, including unencrypted local storage.

0
ProgrammingDEV Community ·

Developer Builds "Sloth", a Zero-LLM Memory System to Stop Agents Forgetting Context

A developer on DEV Community describes frustration with an AI agent that repeatedly lost track of prior information. In response, they built a memory component called Sloth that does not rely on a large language model. The system is designed so the agent does not need to re-explain previously established context. The article text on the platform did not render correctly, so further technical details about how Sloth works could not be confirmed from the source.