Benchmark-tested AI review, free to start

$ rmcode

{o,o}

/)__) rmcode v0.1.2 — AI code review

" " ─────────────────────────────────

✓ Reviewed branch changes (12 files, typescript)

2 findings · 1 security · 1 bug

1 ▌ SECURITY SQL injection via unsanitized input

▌ at src/routes/users.ts:134

▌ Attacker-controlled input interpolated directly into SQL

▌ fix: db.query('SELECT * FROM users WHERE id = $1', [userId]);

──────────────────────────────────────

2 ▌ BUG Missing null check on webhook payload

▌ at src/middleware/auth.ts:87

▌ req.body.data can be undefined when Stripe sends test events

▌ fix: if (!req.body?.data) return res.status(400).end();

── ✗ changes requested · 2 findings · 1m48s ──

Scout · Free plan