Open-source toolkits for deep, systematic, and reproducible software review.
ReviewToolkits builds specialized tools for exploring large codebases, identifying potential correctness and reliability issues, validating findings, and producing reproducible reports.
Our focus is not simply on finding more issues.
The goal is to find meaningful issues, understand them, reproduce them, and communicate them responsibly.
ReviewToolkits develops project-specific and general-purpose review tooling for complex software projects.
Our work covers:
- 🔍 Deep source-code exploration
- 🧠 Semantic and structural analysis
- 🐛 Bug discovery and validation
- 🧪 Reproduction and verification
- 🧵 Concurrency and free-threading analysis
- 🧩 API and extension compatibility review
- 🦀 Language- and runtime-specific analysis
- 📝 Structured and reproducible findings
- 🔄 Regression and follow-up analysis
- 🤝 Responsible upstream reporting
General-purpose code review tooling for exploring existing codebases and identifying potential correctness, quality, testing, and architectural issues.
Repository:
https://github.com/ReviewToolkits/code-review-toolkit
A specialized review toolkit for exploring and analyzing the CPython source tree.
It focuses on issues that require understanding CPython internals, C-level behavior, error handling, reference management, interpreter behavior, and project-specific conventions.
Repository:
https://github.com/ReviewToolkits/cpython-review-toolkit
Specialized tooling for reviewing CPython C extensions.
The toolkit focuses on extension-specific concerns such as Python/C API usage, reference lifetimes, module state, type slots, ABI compatibility, memory safety, and correctness.
Repository:
https://github.com/ReviewToolkits/cext-review-toolkit
Tooling focused on free-threading and concurrency-related review.
It is designed to help investigate code affected by CPython's free-threaded execution model, including potential races, synchronization issues, and thread-safety assumptions.
Repository:
https://github.com/ReviewToolkits/ft-review-toolkit
A specialized review toolkit for RustPython and its Rust implementation.
It provides project-aware analysis aimed at finding correctness, safety, runtime, and implementation-specific issues.
Repository:
https://github.com/ReviewToolkits/rustpy-review-toolkit
A collection of documented findings discovered while reviewing the PyPy codebase.
The repository is intended to preserve reproducible findings, investigation details, and the status of issues reported upstream.
Repository:
https://github.com/ReviewToolkits/pypy-review-findings
A typical ReviewToolkits investigation follows a workflow similar to:
┌─────────────────────┐
│ Codebase │
└──────────┬──────────┘
│
▼
┌─────────────────────┐
│ Code Exploration │
│ Static + Semantic │
└──────────┬──────────┘
│
▼
┌─────────────────────┐
│ Candidate Findings │
└──────────┬──────────┘
│
▼
┌─────────────────────┐
│ Human Investigation │
└──────────┬──────────┘
│
▼
┌─────────────────────┐
│ Reproduction / Test │
└──────────┬──────────┘
│
▼
┌─────────────────────┐
│ Confirmed Finding │
└──────────┬──────────┘
│
▼
┌─────────────────────┐
│ Report / Issue / PR │
└─────────────────────┘
