src/constructs/ec2/vpc.ts (3 lines):
	- line 14: // TODO convert to boolean
	- line 20: // TODO: Migrate this to use `AppIdentity`
	- line 44: * TODO: Understand VPCs and Subnets better and develop a better solution to this problem


src/experimental/patterns/ec2-app.ts (3 lines):
	- line 42: * TODO Expose the healthcheck grace period as a property on {@link GuEc2App} and remove this `Aspect`.
	- line 272: * TODO test User Data includes a build number.
	- line 382: // TODO Once out of experimental, instantiate these `Aspect`s directly in `GuStack`.


src/constructs/core/stack.ts (2 lines):
	- line 99: // TODO add validation for `key` and `value`
	- line 124: // TODO Use `DefaultStackSynthesizer` or create own synthesizer?


src/constructs/ses/index.ts (1 line):
	- line 18: // TODO: Expand this list as we add more domains


src/constructs/autoscaling/asg.ts (1 line):
	- line 19: // TODO avoid prop nesting to improve discoverability. See https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md#flat.


src/constructs/iam/policies/ssm-ssh.ts (1 line):
	- line 39: // TODO can this be scoped to the stack, stage, and application? If so, it won't make sense to be a singleton.


src/patterns/ec2-app/base.ts (1 line):
	- line 422: // TODO should this be defaulted at pattern or construct level?


src/riff-raff-yaml-file/deployments/cloudformation.ts (1 line):
	- line 23: // TODO remove `lodash.kebabcase` dep as it's not that much code to kebab-ise a string...


src/constants/regex-pattern.ts (1 line):
	- line 6: // TODO be more strict on region?


src/constructs/ec2/security-groups/base.ts (1 line):
	- line 77: // TODO should this be a singleton?


tools/eslint/rules/valid-constructors.js (1 line):
	- line 19: TODO: If all values in third type are optional then parameter should be optional


src/utils/ec2/private-config.ts (1 line):
	- line 6: *   TODO change this once we have defined best practice for configuration.