Add to that list suppression of warnings from valgrind and address sanitizer without any justification. And no tracking issue to follow up on fixing the problem so the suppression can be removed.
Committing binary files to source control rather than including build commands to generate the files is a bit of a red flag.