open-code-review
Hybrid architecture code review tool with LLM Agent for precise line-level comments and built-in security rule checks.
GraphCanon updated today · GitHub synced today
Decision brief
open-code-review is a hybrid architecture code review tool using deterministic pipelines and an LLM Agent to provide detailed feedback, including specific security rule checks.
Good fit when
- When leveraging the capabilities of a large language model (LLM) agent for precise line-level commenting and rule enforcement, especially if you are familiar with or prefer Go in your tech stack.
- If working on projects that require adherence to strict security best practices related to null pointer exceptions (NPE), thread-safety, cross-site scripting (XSS), SQL injection prevention, etc., as剿
Avoid when
- For development teams looking for a tool that offers real-time suggestions beyond line-level comments since open-code-review focuses on deterministic pipeline assessments and LLM-generated feedback at
- sync events.
- Pricing:
- freemium - The tool is open-source and free.
Observed Jul 11, 2026 · Source: enrich:decision_facts
Verify the decision
Maintenance and security
Full trust report- Maintenance
- Very active (0d since push)
- As of today
- Provenance
- Not a fork · Organization account
- As of today
- Security (OSV)
- No criticals
- As of 1mo
Public GitHub metadata and optional OSV scans. Signals, not a guarantee. Trust methodology.
Backing
Company context for Alibaba. Display-only - separate from trust and ranking.
- Company
- Alibaba·GitHub org profile·1mo
- Commercial model
- Pure OSS·GitHub org profile (public repos)·1mo
Install
go get github.com/alibaba/open-code-reviewHow it fits your stack(9)
Typed graph edges - alternatives, integrations, successors, and dependencies. Ranked by relationship type, not raw GitHub stars.
Integrates
Relationship graph
Optional deeper exploration of typed edges and category neighbours.
Similar tools
Same-category neighbours not already linked as typed edges.
Evidence and technical details
Sourced facts, taxonomy, compatibility claims, README excerpt, and machine-readable endpoints.
Overview
A code review tool that leverages a combination of deterministic pipelines and an LLM Agent to provide detailed feedback on code, including specific ruleset checks (NPE, thread-safety, XSS, SQL injection). Compatible with OpenAI and Anthropic.
Capability facts
- CLI
- CLI entrypoint
Source: package.json:bin|scripts · Aug 19, 2026
- MCP server
- No MCP server detected
Source: repo_scan · Aug 19, 2026
- Languages
- go, javascript
Source: github.language+package.json · Aug 19, 2026
Categories
Graph entities
Tags
README
License
Apache-2.0 — Copyright 2026 Alibaba
For agents
This page has a .md twin and JSON over the API.