https://foojay.io/today/secure-code-review-best-practices-part-2/