src/olympia/abuse/cinder.py (1 line):
	- line 211: # TODO: send action too once


src/olympia/blocklist/admin.py (1 line):
	- line 213: # TODO: define under what cirumstances records can be safely deleted.


src/olympia/api/models.py (1 line):
	- line 49: # TODO: use RSA public keys instead? If we were to use JWT RSA keys


src/olympia/landfill/management/commands/fetch_prod_addons.py (1 line):
	- line 87: # TODO:


static/js/stats/chart.js (1 line):
	- line 146: events = [], // TODO: remove this, it is not used anymore because


src/olympia/landfill/management/commands/fetch_prod_versions.py (1 line):
	- line 101: # FIXME: maybe reviewed/created would make sense at least, to


src/olympia/translations/models.py (1 line):
	- line 88: # FIXME: if the Translation is the one used as default/fallback,


src/olympia/addons/admin.py (1 line):
	- line 182: # TODO: This is probably a redundant dependency


src/olympia/api/jwt_auth.py (1 line):
	- line 64: # TODO: add nonce checking to prevent replays. bug 1213354.


static/js/common/upload-addon.js (1 line):
	- line 375: // TODO: Disable these when unchecked, or bounce


src/olympia/promoted/admin.py (1 line):
	- line 52: # TODO: implement pagination like FileInline does


src/olympia/users/utils.py (1 line):
	- line 383: ## TODO: check if we can set `customMessageId` to replace code snippet


src/olympia/reviewers/decorators.py (1 line):
	- line 97: # FIXME: this replace() is fragile, if the add-on slug appears


src/olympia/translations/transformer.py (1 line):
	- line 82: # FIXME: if we knew which db the queryset we are transforming used, we


src/olympia/amo/sitemap.py (1 line):
	- line 86: # x_default = False  # TODO: enable this when we can validate it works well


src/olympia/devhub/utils.py (1 line):
	- line 136: # FIXME: Remove `uid` once addons-linter generates it


src/olympia/users/management/commands/createsuperuser.py (1 line):
	- line 29: # TODO: Use `UserProfile.REQUIRED_FIELDS`? Not sure why `username`


src/olympia/devhub/tasks.py (1 line):
	- line 284: # TODO: actually fix this so we can get stats. It seems that


src/olympia/files/utils.py (1 line):
	- line 1017: # FIXME: do the checks depending on user here.


src/olympia/devhub/urls.py (1 line):
	- line 225: # TODO: not necessary when devhub homepage is moved out of remora


src/olympia/addons/views.py (1 line):
	- line 1154: # FIXME: we want to prefetch file.webext_permission instances in here


static/js/zamboni/devhub.js (1 line):
	- line 242: // TODO (potch) find a good fix for this later


static/js/admin/scannerqueryresult.js (1 line):
	- line 24: // FIXME: for performance, it might be better to store the elements we


src/olympia/amo/monitors.py (1 line):
	- line 298: # TODO: We should be able to check remote settings


static/css/zamboni/developers.css (1 line):
	- line 191: Bug 622030- TODO (potch) fix this later


src/olympia/reviewers/models.py (1 line):
	- line 233: null=True,  # TODO: remove this once code has deployed to prod.


src/olympia/api/fields.py (1 line):
	- line 505: # TODO: get all locales or KEY_LOCALES_FOR_EDITORIAL_CONTENT at least?


src/olympia/blocklist/mlbf.py (1 line):
	- line 59: # TODO: https://github.com/mozilla/addons/issues/15204


src/olympia/scanners/tasks.py (1 line):
	- line 419: # TODO: retrieve all scanner results and pass each result to the API.


src/olympia/scanners/admin.py (1 line):
	- line 933: # FIXME: revoke existing tasks (would need to extract the


src/olympia/versions/tasks.py (1 line):
	- line 105: # TODO: improvement - only re-encode jpg backgrounds as jpg?


src/olympia/bandwagon/admin.py (1 line):
	- line 17: # FIXME: leaving 'comments' editable seems to break uniqueness checks for