search legion

Review · QA tools

Codecov review

A capable PR coverage tool with a usable free tier, but upload caps and reliability complaints deserve a close look.

6.5/10Search Legion score

We may earn a commission if you buy through links on this page. It never changes a score or a ranking. How we make money

The bottom line

Good PR coverage depth and a free tier; weigh the caps and reliability complaints before switching.

Codecov combines coverage reporting with PR feedback, flaky-test tracking, test-performance trends and JavaScript bundle-size checks. The pricing page lists a free Developer plan with one private-repo user and 250 private uploads monthly; Team is $5 per user monthly or $4 on the annual listing, capped at 10 users and 2,500 private uploads monthly. Pro is $12 per user monthly, with no annual rate shown.

That makes Codecov worth considering if coverage feedback belongs in your PR workflow, but don’t treat coverage as a measure of test quality. Reddit users report missed coverage, upload failures and inconsistent results; discussions also revisit a past uploader compromise. Those reports are not a measure of how often problems happen, but they make reliability and CI security worth checking before a migration.

Good fit if

  • Teams adding coverage feedback to pull requests
  • Open-source projects needing unlimited public uploads
  • Teams tracking coverage and bundle-size changes

Skip it if

  • Teams wanting unlimited private uploads on a free plan
  • Teams that treat coverage as proof of test quality
  • Teams unwilling to review CI security risks
Codecov homepage
Codecov homepage, captured Nov 7, 2026

ScoresHow it rates

  • Features8
  • Ease of use7
  • Value for money7
  • Support5.5
  • User sentiment4.5

What works

  • Free Developer plan includes unlimited public uploads and repositories
  • Team supports unlimited private repositories
  • PR feedback includes coverage analysis and risk insights
  • Tracks flaky tests and test-suite performance
  • Bundle-size tracking supports limits and status checks

What doesn't

  • Developer plan allows 250 private uploads monthly
  • Team plan caps at 10 users and 2,500 private uploads monthly
  • Pro costs $12 per user monthly; annual pricing is not listed
  • Reddit users report missed coverage and upload failures
  • Reddit discussions raise concerns about a past uploader compromise

01What Codecov actually does

Codecov is a code-coverage and code-quality service that reports on tests in pull requests and CI. It measures which code is covered, then adds coverage analysis, code suggestions, and risk insights to pull requests. Teams can also use it to generate unit tests, flag flaky or failing tests, see which tests failed on which lines, and track test-suite performance over time.

Coverage can be customized to emphasize relevant changes. For JavaScript projects, Codecov tracks bundle-size changes and supports size limits with status checks. It integrates with programming languages, CI platforms, and code hosts, though the published product information does not name specific integrations.

The practical distinction is that Codecov reports test coverage and related signals; a coverage percentage is not, by itself, a measure of whether tests are useful. A commenter on r/ExperiencedDevs makes that same distinction, noting that coverage can help reviewers see what is tested but does not establish test quality.

02Where Codecov is strong

Codecov’s main advantage is putting several test and change signals into the pull-request workflow. Instead of treating coverage as a number to check after CI, teams can review coverage analysis, code suggestions, and risk insights alongside a proposed change. The product also covers adjacent needs: flaky-test tracking, test performance over time, and JavaScript bundle-size checks.

  • AI-generated unit tests can help teams add tests intended to improve pull-request coverage.
  • Flaky-test tracking flags flaky and failing tests, and shows which lines failed which tests.
  • Coverage customization lets teams focus analysis on the insights they consider relevant.
  • Bundle-size tracking includes size limits and status checks for JavaScript changes.

The free Developer plan is listed at $0 per month and includes unlimited public uploads and repositories, plus one user and 250 private uploads per month. The pricing page lists Team at $5 per user/month, or $4 on its annual-price listing, with a 10-user maximum and 2,500 private uploads per month. Pro is listed at $12 per user/month and includes unlimited users and private and public uploads. That gives teams a way to start free and compare the upload limits against the cost of upgrading.

03Where it falls short

The free plan’s private-upload allowance is limited to 250 per month and one user. Team raises that to 2,500 private uploads per month, but caps the team at 10 users. Pro removes the listed upload and user limits, but costs $12 per user/month; the pricing information gives no annual Pro rate. Enterprise pricing is custom, so the cost is not published. The 14-day free trial is listed, but the published pricing details do not say which plan or features it covers.

Reliability is the other reason to be cautious before switching. In one r/ExperiencedDevs thread, users report missed or misreported coverage, upload failures, and reruns; one commenter says their project stopped relying on Codecov beyond report ingestion. These are user reports, not a measure of how often problems occur. The same discussion points out that coverage can fall when covered code is deleted, which may be accurate without meaning the tests got worse.

Reddit discussions also refer to the Codecov Bash Uploader compromise and private-repository cloning by an attacker. Teams evaluating any CI-connected service should weigh that history alongside their own security requirements.

04Codecov pricing: what you'll actually pay

Codecov has a free Developer plan, but private use is capped at one user and 250 uploads per month. Public uploads and repositories are unlimited. The pricing page lists Team at $5 per user per month, or $4 per user per month on its annual-price listing. Team allows up to 10 users and 2,500 private uploads monthly. Check which billing rate applies before budgeting: the annual rate is listed, but the billing details are not specified here.

Pro costs $12 per user per month, with no annual rate shown. That is a $7-per-user monthly jump from Team’s listed monthly price, or $8 compared with its annual listing. Pro removes the user limit and allows unlimited private and public uploads; it also includes flags, carryforward flags, components, and project coverage. Enterprise pricing is custom. No paid add-ons are listed, and the offer includes a 14-day free trial.

Full Codecov pricing breakdown →

05Switching to (or from) Codecov

Codecov connects with code hosts, CI platforms, and programming languages, so switching means checking that your existing setup can send coverage data and that pull-request feedback fits your workflow. The published material does not specify migration steps, data-export options, or how long a move takes. Ask Codecov what can be exported and whether historical coverage data transfers before you switch; those details are not published here.

There is no clear lock-in detail in the published sources. A practical reason to reconsider is plan capacity: Developer caps private uploads at 250 per month, while Team caps them at 2,500 and 10 users. The review brief flags reliability complaints, but it provides no Reddit posts or specifics to substantiate what users report or why they leave. Treat that as a point to investigate, not a proven pattern. Teams that depend on coverage history or CI checks should confirm how those behave during a migration.

From the threadsWhat users say

Reddit comments are mixed but lean wary: users describe a serious uploader compromise and report reliability problems, while some find coverage useful as a review signal. Several commenters also caution that coverage numbers alone do not show whether tests are good.

Security concerns
I just spent the evening changing a few keys in my service
r/programming · view thread
Upload reliability
It was unreliable enough that we had to shut it off on the big open source project I was involved with
r/ExperiencedDevs · view thread
Coverage limits
Coverage measurement is a pretty blunt instrument
r/ExperiencedDevs · view thread
License confusion
Business Source License is not open source, as explicitly stated in the license text
r/programming · view thread

Questions people ask

What does Codecov do?

Codecov measures code coverage and adds analysis, code suggestions, and risk insights to pull requests. It also offers AI-generated unit tests, flaky-test tracking, test-performance tracking, customizable coverage analysis, and JavaScript bundle-size tracking with status checks. It integrates with programming languages, CI platforms, and code hosts; the published product information does not name specific integrations.

How much does Codecov cost?

According to the pricing information checked November 7, 2026, Developer is free. Team is listed at $5 per user monthly or $4 per user monthly on the annual-price listing, for up to 10 users. Pro is $12 per user monthly, with no annual rate shown. Enterprise pricing is custom. A 14-day free trial is listed.

What do you get on Codecov’s free plan?

The Developer plan costs $0 per month and is listed for open-source and small private repositories. It includes one user for private repos, 250 private uploads per month, unlimited public uploads, and unlimited repositories. The pricing information does not list an annual price for this plan.

Should Codecov’s coverage results be treated as a reliable merge gate?

Reddit users report missed or inconsistent coverage and upload failures, including EPIPE errors; some say they stopped requiring coverage or limited Codecov to ingest. Other commenters say coverage can help reviewers see whether code is tested. Several caution that a high coverage number does not prove tests are good. The comments do not establish how common these issues are today.

Does high code coverage mean the tests are good?

Not by itself. One commenter says coverage is a blunt instrument, and another notes that deleting covered code can lower the reported percentage even when the remaining tests have not changed. Users describe coverage as a useful indicator that code has some testing, but not a measure of test quality on its own.

Sources

  1. Codecov homepage
  2. Codecov pricing page
  3. Reddit: Twilio's private GitHub repositories cloned by Codecov attacker, cloud comms platform confirms
  4. Reddit: Codecov's Bash Uploader for Coverage Reports Compromised
  5. Reddit: Is anyone having a hell of a time with CodeCov recently? (past 2-3 years)
  6. Reddit: Codecov is now Open Source