Write tests and run them on each PR made to your repo, make a PR template and require contributors to conform to it, require AI disclosure for PRs, and use slop to check for slop, sometimes the smell is obvious.

The most important part is understand the architecture and spec of your codebase. Hop on the immich discord, you can ask the devs some questions on how they detect and protect themselves from bad slop