Goodies for Peer Reviews

These documents and links are presented to assist your practice of software peer reviews. You are free to use these items and to modify them to best suit your needs. However, you may NOT sell them, adapt or incorporate them into any commercial product or service without permission from Process Impact, or post them on any web site accessible outside your company. NOTE: The Excel files and some of the Word files contain macros.

All payments received for these items are donated to the Norm Kerth Benefit Fund to help a software consultant who has been disabled since 1999 with a traumatic brain injury. You may also make additional donations to this fund. Thank you for your support.

---

Process Assets for Software Peer Reviews and Inspections

Peer Review Process Description (preview)

Requirements Specifications

Use Cases

Architecture

High-Level Designs

Detailed Designs

Source Code (Generic)

C++ Source Code

Java Source Code

Test Plans

Project Plans

Inspection Summary Report

Inspection Issue Log

Typo List

Inspection Moderator's Checklist

Inspection Lessons Learned Questionnaire

Spreadsheet for code inspection data

Sample code inspection data spreadsheet

Spreadsheet for document inspection data

• Codestriker is an open-source web-based application that supports online code reviewing. It's available under the GNU public license. Codestriker integrates with several version-control and defect-tracking tools.
  
  
• Code Collaborator from SmartBear Software is a Windows-based commercial tool that facilitates code review by remote reviewers. It builds an audit trail of review activities and integrates with several commercial version-control products.
  
  
• ASSIST, the Asynchronous/Synchronous Software Inspection Support Tool, is available for research use. Displaying documents in a browser, it assists (get it?) both individual and group inspection activities performed either synchronously or asynchronously.

• Reasoning provides an InstantQA (sm) service (not product) to inspect C and C++ code.
  
  
• Parasoft offers several commercial tools that scan C or C++ code to detect violations of some 170 established coding standards in those languages.
  
  
• DevPartner from Micro Focus analyzes source code in languages including C#, Visual Basic .NET and ASP .NET for potential problems, rule nonconformances, and violations of coding standards that could lead to problems.
  
  
• Several commercial versions of the Lint static code analyzer are available, primarily for programs written in C and C++, but also Fortran and Java. Examples are Lint-PLUS for C and FortranLint from Cleanscape Software International and Flexelint from Gimpel Software.
  
  
• Splint is a tool to statically check C programs for security vulnerabilities and coding mistakes.
  
  

• Don O'Neill wrote an excellent summary of peer reviews for the Encyclopedia of Software Engineering. Don also has information about the National Software Quality Experiment, with benchmark performance data collected from thousands of inspections.
  
  
• Tom Gilb has made many of his writings, slide presentations, and resources on inspections available for downloading.