audit-performance-efficiency

TODAY=!date +%Y-%m-%d

Performance Efficiency Audit (ISO/IEC 25010)

Audits the codebase for performance efficiency: response time, resource utilization, and capacity limits. It finds statically detectable performance antipatterns before they appear under load.

This is the Performance efficiency characteristic of the ISO/IEC 25010 quality model. Distinct from observe-production (runtime latency/error measurement), this is static analysis of code that will be slow or wasteful.

Prerequisites

• Working directory is the root of the repository
• Read .sdlc/context/architecture.md if present (to identify hot paths and data stores)
• Language-specific tooling optional (see Useful Commands Reference)

What This Checks

Sub-characteristic	What it means	Signals scanned
Time behavior	response/processing times under load	queries in loops (N+1), O(n²) algorithms, blocking I/O in request handlers, time.sleep in hot paths, missing pagination on list endpoints
Resource utilization	CPU, memory, file handles, connections	unbounded collections/caches, large allocations in loops, unclosed resources, missing connection pooling, full-table loads (SELECT *, .all(), fetchall)
Capacity	limits beyond which performance degrades	hardcoded single-thread assumptions, missing rate limiting, unbounded queues, no backpressure, missing indexes on queried columns

Steps

1. Identify hot paths and data stores

From architecture.md and route/endpoint discovery, identify request handlers, batch jobs, and data-access layers. These are where performance findings are most severe.

rg -n "@(app|router|api|blueprint)\.(get|post|put|delete|patch|route)" -g '*.py' .
rg -n "(get|post|put|delete|patch|use|all)\(['\"]" -g '*.{ts,js}' .

2. Query and data-access antipatterns (time behavior)

N+1 / queries-in-loops:

rg -n -B3 "for .+ in .+:" -g '*.py' . | rg "\.(get|filter|find|first|all|execute|query|load)\("

Full-table loads without limits:

rg -n "\.all\(\)|\.fetchall\(\)|SELECT \*|objects\.all|\.findAll\(" -g '*.{py,ts,js}' .

Unbatched writes inside loops:

rg -n "(\.save\(|\.insert\(|\.create\(|\.add\(|\.commit\(|db\.)" -g '*.py' .