John Graham Cumming is doing some excellent analysis of the CRU code, his conclusions being readily accessible to the layman because he writes well too.
He has found four bugs so far and seems less than impressed with the quality of the coding.
(H/T Tom Fuller)