Review the API contract (endpoints, payloads), not the implementation code. List who consumes it — good design depends on the consumer's needs.