First week with CodeRabbit reviewing my PRs on /dev/null, and it's a step up from Copilot's reviews.
It caught things I'd have shipped:
- a cache lock (30s) shorter than the GitHub lookup it guards (up to 50s)
-
aria-describedby pointing at a hint that wasn't rendered anymore
- a U+2060 word joiner I used to measure the caret in RTL text, which forbids the line break after the space before it (UAX #14, LB11). It quoted the Unicode spec at me 😅
But sometimes it's confidently wrong. It flagged this as "runs the refresh outside the lock":
php
Cache::lock($key, 120)->get($this->refresh(...));
(...) is PHP 8.1's first-class callable syntax: it creates a closure without calling the method. I replied, and it answered "You are correct. I misread PHP's first-class callable syntax", then resolved the thread itself.
So: great second pair of eyes, but you still have to know your language to tell a real finding from a hallucinated one. 3 valid, 1 false positive this week.commit a80b587