Add expense tracker app for CodeRabbit review demo

[reeder32]

Summary

• Full-stack TypeScript expense tracker (Express + React + SQLite) with intentional bugs for automated review testing
• Removes Claude and OpenAI GitHub Actions workflows — CodeRabbit is the sole reviewer
• Bugs span security (SQL injection, auth bypass), logic errors, performance issues, and accessibility violations

What to look for

CodeRabbit should demonstrate:

• Executive summary with risk assessment
• Sequence diagrams for complex flows
• Inline comments on security and performance issues
• Suggested reviewers and labels
• Pre-merge quality gate checks

[coderabbitai]

Warning

Rate limit exceeded

@reeder32 has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 16 minutes and 19 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: a0eb847e-3908-46b4-9ef2-22ce0bbcc90f

📥 Commits

Reviewing files that changed from the base of the PR and between 61a8a45 and cd3fceb.

📒 Files selected for processing (18)

• .github/workflows/claude-code-review.yml
• .github/workflows/openai-code-review.yml
• backend/src/db.ts
• backend/src/index.ts
• backend/src/middleware/auth.ts
• backend/src/routes/auth.ts
• backend/src/routes/expenses.ts
• backend/src/routes/reports.ts
• backend/src/utils/validate.ts
• frontend/src/App.tsx
• frontend/src/api/client.ts
• frontend/src/components/ExpenseCard.tsx
• frontend/src/components/StatusBadge.tsx
• frontend/src/pages/Dashboard.tsx
• frontend/src/pages/ExpenseForm.tsx
• frontend/src/pages/ExpenseList.tsx
• frontend/src/pages/Login.tsx
• frontend/src/pages/Reports.tsx

Warning

.coderabbit.yaml has a parsing error

The CodeRabbit configuration file in this repository has a parsing error and default settings were used instead. Please fix the error(s) in the configuration file. You can initialize chat with CodeRabbit to get help with the configuration file.

💥 Parsing errors (1)

Validation error: String must contain at most 250 character(s) at "tone_instructions"; Expected array, received object at "reviews.path_filters"

⚙️ Configuration instructions

• Please see the configuration documentation for more information.
• You can also validate your configuration using the online YAML validator.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch demo/coderabbit-review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}