Was this helpful?
All SQL queries must use parameterized statements. Direct string
concatenation in SQL queries is not allowed.Controllers should not directly access the database. All database
operations must go through a service or repository layer.All REST API endpoints must include rate limiting headers
(X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset).Every exported function must have at least one corresponding test
in the __tests__ directory with the same file name pattern.All public API methods must include JSDoc comments with @param,
@returns, and @throws annotations.