AI code review for Python.
Python review lives and dies on the quiet failures: a query built by string interpolation, an except block that eats a provider error, a constant that should have been a secret. WellMerged orders the diff into Stories first, then runs deterministic checks for exactly those failures.
What WellMerged checks on every Python pull request.
- SQL built by interpolation
- f-string and %-format queries are flagged at the line, with the bound-parameter rewrite suggested as a fix.
- Swallowed exceptions
- except: pass and bare except blocks are called out where they hide failed work from callers and retries.
- Secrets and weak hashing
- Literal credentials and SHA-1 HMACs in new code are flagged as required checks, not warnings.
- Missing pytest coverage
- Changed source without matching tests is flagged, and test drafts for the changed functions are generated.
Beyond the rules, the AI review reads data flow through your functions: where a value enters, what mutates it, and which callers inherit the change.
Run it on your Python repository.
Install the GitHub App and open a pull request. Reviews on public repositories are free with no cap, and every plan starts with 100 private reviews a month.
