Reviews Java 25 and Spring Boot 4 codebases, PRs, files, and modules for migration risks, architecture violations, JSpecify null-safety, security flaws, performance regressions, and Spring Data pitfalls.
npx claudepluginhub a-pavithraa/springboot-skills-marketplace --plugin springboot-architectureThis skill uses the workspace's default tool permissions.
Use this skill to run a structured review of Java 25 and Spring Boot 4 code. Keep findings grounded in the actual codebase and use the reference files only for the focus areas that apply.
Verifies Spring Boot 4.x projects for dependency compatibility, configuration correctness, and migration readiness. Analyzes pom.xml, build.gradle, and application.yml files.
Migrates Spring Boot apps to version 4 with Java 25 via phased upgrades, including Spring Modulith 2, Testcontainers 2, codebase scanning, and reference guides.
Orchestrates multi-phase code reviews using specialized agents for quality, architecture, security, performance, testing, and documentation. Integrates SonarQube, CodeQL, Semgrep; framework options for React, Django, Spring.
Share bugs, ideas, or general feedback.
Use this skill to run a structured review of Java 25 and Spring Boot 4 code. Keep findings grounded in the actual codebase and use the reference files only for the focus areas that apply.
Collect the minimum context required to review accurately:
Load references just in time:
| Focus | Read |
|---|---|
| Spring Boot 4 migration patterns and framework deltas | references/spring-boot-4-patterns.md |
| Java 25 language and concurrency adoption | references/java-25-features.md |
| Security review | references/security-checklist.md |
| Performance review | references/performance-patterns.md |
| Architecture boundaries and packaging | references/architecture-patterns.md |
| Domain model shape | references/domain-modeling.md |
| Value-object-heavy designs | references/value-objects-patterns.md |
| Null-safety checks | references/jspecify-null-safety.md |
Escalate to another skill when needed:
spring-data-jpa for deep repository, query, and relationship work.springboot-migration for phased upgrade planning or upgrade execution.Run only the passes that match the request. For a full review, use this order.
pom.xml or build.gradle.Use these as review prompts, not as a substitute for code evidence.
TestRestTemplate usage instead of RestTestClientHttpServiceProxyFactory boilerplate instead of @ImportHttpServicesspring.mvc.apiversion.*@ConcurrencyLimit or native @Retryable without @EnableResilientMethodspackage-info.java where the project uses JSpecifyorg.springframework.lang annotations in code that has already moved to JSpecifyOrder findings by severity and use this template:
## Critical
- **[Category]**: Issue summary
- **File**: `path/to/File.java:123`
- **Impact**: What can fail, leak, or regress
- **Fix**: Specific change to make
## High
- ...
## Medium
- ...
## Low
- ...
If there are no findings, say so explicitly and call out any remaining blind spots such as unreviewed modules, missing tests, or unavailable runtime context.
references/spring-boot-4-patterns.md and references/java-25-features.md.references/security-checklist.md or references/performance-patterns.md if the diff touches those areas.references/security-checklist.md.references/architecture-patterns.md.references/domain-modeling.md or references/value-objects-patterns.md if the code suggests a rich-domain approach.references/spring-boot-4-patterns.md and references/java-25-features.md.springboot-migration if the user wants a phased upgrade plan rather than a review.