Block a user
feature: no partial transfer resume or --partial support
atoi() used for ssh_port and server_port without error validation
Return values of chmod() and chown() in file_restore_metadata() are ignored
Duplicate file receive logic in delta fallback path in file.c
data_compress() ignores compression_level parameter — always uses zstd default (3)
log_message() format parameter should be const char*
feature: no network timeout handling — operations can hang indefinitely
feature: no symbolic link handling (ignored or broken)
enhancement: TCP transport only supports IPv4, no IPv6 support
security: TLS does not verify server certificate when no CA is provided
Exclude/include patterns and size filters not transmitted over wire to server
performance: entire file content loaded into RAM -- no streaming for large files
FILE_METADATA_WIRE_SIZE is not portable between 32-bit and 64-bit systems
Add --version flag to both client and server binaries
No dedicated unit tests for multiprocessing module
No unit tests for the logging module (log.c/log.h)
Scanner exclude/include pattern tests lack edge case coverage
No unit tests for transport modules (TCP, SSH, TLS)
glob_match() does not support double-star (**) recursive glob patterns
Global g_server variable in server.c is not thread-safe for signal handling