Questions to Ask

• Does it satisfy the original requirements?
• Is it logically correct?
• Is there no unnecessary complexity?
• Is it robust (i.e., no concurrency issues, proper error handling, etc.)?
• Is it performant?
• Is it secure (i.e., no SQL injections, etc.)?
• Is it observable (i.e., metrics, logging, tracing, etc.)?
• Do newly added dependencies pull their weight? Is their license acceptable?