Block a user
atoi() used for ssh_port and server_port without error validation
Return values of chmod() and chown() in file_restore_metadata() are ignored
Duplicate file receive logic in delta fallback path in file.c
data_compress() ignores compression_level parameter — always uses zstd default (3)
log_message() format parameter should be const char*
feature: no network timeout handling — operations can hang indefinitely
data.h includes <stdlib.h> via quotes instead of angle brackets
FILE_METADATA_WIRE_SIZE is not portable between 32-bit and 64-bit systems
Add --version flag to both client and server binaries
No dedicated unit tests for multiprocessing module
No unit tests for the logging module (log.c/log.h)
Scanner exclude/include pattern tests lack edge case coverage
No unit tests for transport modules (TCP, SSH, TLS)
glob_match() does not support double-star (**) recursive glob patterns
Global g_server variable in server.c is not thread-safe for signal handling
Fix refactoring and portability issues (#61, #51, #52)
Add unit test coverage (#71, #63, #62, #56, #55)
Fix integration issues: ssl_ctx init + test API updates
Fix memory/null safety bugs (#74, #72, #69, #64, #60, #50, #49, #65)