{"data":{"slug":"alibaba-open-code-review","name":"open-code-review","tagline":"Hybrid architecture code review tool with LLM Agent for precise line-level comments and built-in security rule checks.","github_url":"https://github.com/alibaba/open-code-review","owner":"alibaba","repo":"open-code-review","owner_avatar_url":"https://avatars.githubusercontent.com/u/1961952?v=4","primary_language":"Go","stars":20812,"forks":1482,"topics":["agent","agent-skills","code-review","code-review-assistant","harness","repository-level-context"],"archived":false,"github_pushed_at":"2026-08-19T11:05:53+00:00","maintenance_label":"Very active","stars_delta_30d":10113,"url":"https://www.graphcanon.com/tools/alibaba-open-code-review","markdown_url":"https://www.graphcanon.com/tools/alibaba-open-code-review.md","api_url":"https://www.graphcanon.com/api/graphcanon/tools/alibaba-open-code-review","graph_url":"https://www.graphcanon.com/api/graphcanon/graph?tool=alibaba-open-code-review","description":"Fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.","homepage_url":"https://open-codereview.ai","license":"Apache-2.0","open_issues":126,"watchers":66,"ai_summary":"A code review tool that leverages a combination of deterministic pipelines and an LLM Agent to provide detailed feedback on code, including specific ruleset checks (NPE, thread-safety, XSS, SQL injection). Compatible with OpenAI and Anthropic.","readme_excerpt":"## License\n\n[Apache-2.0](LICENSE) — Copyright 2026 Alibaba","github_created_at":"2026-05-18T02:16:36+00:00","created_at":"2026-07-07T17:39:28.060302+00:00","updated_at":"2026-08-19T12:01:04.770537+00:00","categories":[{"slug":"developer-tools","name":"Developer Tools","url":"https://www.graphcanon.com/categories/developer-tools","markdown_url":"https://www.graphcanon.com/categories/developer-tools.md","api_url":"https://www.graphcanon.com/api/graphcanon/categories/developer-tools"},{"slug":"llm-frameworks","name":"LLM Frameworks","url":"https://www.graphcanon.com/categories/llm-frameworks","markdown_url":"https://www.graphcanon.com/categories/llm-frameworks.md","api_url":"https://www.graphcanon.com/api/graphcanon/categories/llm-frameworks"}],"tags":[{"slug":"agent-skills","name":"agent-skills"},{"slug":"code-review-assistant","name":"code-review-assistant"},{"slug":"repository-level-context","name":"repository-level-context"}],"trust":{"provenance":{"is_fork":false,"github_id":1241960226,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-08-19T12:01:03.975Z","maintenance":{"label":"Very active","score":96,"methodology":"github_public_v1","releases_90d":30,"days_since_push":0,"last_release_at":"2026-08-19T06:37:11Z","stars_delta_30d":10113,"open_issues_delta_30d":89},"security_summary":{"status":"ok","scanner":"osv@v1","low_count":0,"high_count":0,"last_scan_at":"2026-07-11T11:14:27.549Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"capability_facts":{"mcp":{"source":"repo_scan","observed_at":"2026-08-19T12:01:04.463Z","server_manifest":false},"scan":{"source":"repo_scan","observed_at":"2026-08-19T12:01:04.463Z"},"has_cli":{"value":true,"source":"package.json:bin|scripts","observed_at":"2026-08-19T12:01:04.463Z"},"languages":{"value":["go","javascript"],"source":"github.language+package.json","observed_at":"2026-08-19T12:01:04.463Z"},"license_spdx":{"value":"Apache-2.0","source":"github.license","observed_at":"2026-08-19T12:01:04.463Z"}},"decision_facts":{"hosting":null,"pricing":{"model":"freemium","summary":"The tool is open-source and free."},"requirements":null,"constraints":{"pricing_model":"freemium"},"when_to_use":["When leveraging the capabilities of a large language model (LLM) agent for precise line-level commenting and rule enforcement, especially if you are familiar with or prefer Go in your tech stack.","If working on projects that require adherence to strict security best practices related to null pointer exceptions (NPE), thread-safety, cross-site scripting (XSS), SQL injection prevention, etc., as剿"],"when_not_to_use":["For development teams looking for a tool that offers real-time suggestions beyond line-level comments since open-code-review focuses on deterministic pipeline assessments and LLM-generated feedback at","sync events.","When specific integration with frameworks or languages not supported by this tool is crucial, such as those needing more Python-centric integrations which might not align well with its Go-based core."],"source":"enrich:decision_facts","observed_at":"2026-07-11T15:48:26.960Z"},"constraint_facets":{"pricing_model":"freemium"},"decision_summary":[{"label":"Pricing","value":"freemium - The tool is open-source and free."},{"label":"Adopt for","value":"open-code-review is a hybrid architecture code review tool using deterministic pipelines and an LLM Agent to provide detailed feedback, including specific security rule checks."},{"label":"License detail","value":"Apache-2.0 license, providing a balance between permissive usage and explicit patent grants."}]}}