Open-source code-review software
225 open-source libraries, tools and applications tagged code-review, ranked by how closely code-review is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
225 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| ai-genie/chatgpt-vscode Genie AI is a Visual Studio Code extension that integrates OpenAI's ChatGPT models (GPT-4o, GPT-4, GPT-3.5, o1) as an AI pair programmer. I… | 21 | 1275 | active |
| better-auth/better-hub Better Hub is a re-imagined code collaboration platform that provides an improved interface for GitHub, covering repo overviews, PR reviews… | 50 | 1267 | active |
| amElnagdy/guard-skills A collection of guard skills for AI coding agents that act as second-pass quality gates on AI-generated code, tests, and documentation. It … | 51 | 1260 | active |
| GerritCodeReview/gerrit Gerrit is a self-hosted web-based code review and project management tool for Git-based projects, featuring side-by-side diffs, inline comm… | 77 | 1230 | stable |
| meziantou/Meziantou.Analyzer Meziantou.Analyzer is a C# Roslyn analyzer distributed as a NuGet package that performs static analysis to detect bugs, security issues, an… | 96 | 1213 | active |
| mckaywrigley/ai-code-translator A web application that uses AI (LLMs) to translate source code from one programming language to another. It is a Next.js/TypeScript app tha… | 31 | 4171 | maintenance |
| rails_best_practices rails_best_practices is a code metric tool that checks the quality of Rails code against a set of best-practice rules. It runs from the com… | 64 | 4157 | maintenance |
| pashov/skills A collection of AI-powered Solidity security skills built by Pashov Audit Group, packaged for use with AI coding assistants like Claude Cod… | 76 | 1189 | active |
| Gentleman-Programming/gentleman-guardian-angel Gentleman Guardian Angel (gga) is a pure-Bash CLI tool that runs AI-powered code reviews on staged files via a git pre-commit hook, using a… | 71 | 1184 | active |
| vercel-labs/eve-software-factory-template Foreman is a template for an 'eve Software Factory' that runs AI agents across the development loop: a classifier triages tasks from GitHub… | 57 | 1144 | active |
| google/crubit Crubit is a bidirectional bindings generator that automatically creates FFI bindings between C++ and Rust, enabling code in either language… | 77 | 1134 | active |
| wasabeef/claude-code-cookbook A collection of commands, roles, and automation hooks that extend Claude Code with custom slash commands for common development tasks. It a… | 63 | 1133 | active |
| oclint/oclint OCLint is a static source code analysis tool for C, C++, and Objective-C that inspects the abstract syntax tree to find bugs, unused code, … | 58 | 3891 | maintenance |
| captainhook-git/captainhook CaptainHook is a flexible git hook manager for PHP developers that lets teams configure git hook actions in a JSON file. It supports built-… | 74 | 1123 | active |
| PyCQA/flake8-bugbear flake8-bugbear is a plugin for the Flake8 linter that adds checks for likely bugs and design problems in Python code. It provides opinionat… | 88 | 1119 | active |
| openclaw/agent-skills A shared catalog of reusable skills (workflow definitions and helper scripts) for coding agents like Codex and Claude Code, installable via… | 82 | 1106 | active |
| asklokesh/loki-mode Loki Mode is a spec-driven autonomous SDLC framework that turns a PRD, GitHub issue, OpenAPI spec, or one-line brief into a deployed applic… | 80 | 1100 | active |
| SonarOpenCommunity/sonar-cxx A SonarQube community plugin that adds C and C++ support to SonarQube, focusing on integrating existing C++ analysis tools. It parses C/C++… | 82 | 1098 | active |
| palantir/policy-bot policy-bot is a GitHub App that enforces configurable approval policies on pull requests by reporting a status check. It supports complex r… | 95 | 1058 | active |
| danielstjules/jsinspect jsinspect is a Node.js CLI tool that detects copy-pasted and structurally similar JavaScript code by comparing ASTs rather than raw tokens.… | 23 | 3579 | maintenance |
| klen/pylama Pylama is a code audit tool for Python that wraps multiple linters (pycodestyle, pydocstyle, PyFlakes, McCabe, Pylint, Radon, eradicate, My… | 68 | 1048 | active |
| villesau/ai-codereviewer A GitHub Action that uses OpenAI's GPT-4 API to automatically review pull requests and post intelligent feedback comments. It retrieves PR … | 21 | 1044 | active |
| raroque/vibe-security-skill An agent skill in the Agent Skills format that audits applications for common security vulnerability patterns introduced by AI coding assis… | 44 | 1028 | active |
| ezyang/ghstack ghstack is a command-line tool that submits stacks of Git commits to GitHub as separate, dependent pull requests. It supports updating, reb… | 72 | 1016 | active |
| maglnet/ComposerRequireChecker ComposerRequireChecker is a PHP CLI tool that analyzes a composer.json file and the package's source code to detect usage of symbols from u… | 89 | 1012 | active |
| qax-os/goreporter goreporter is a Go CLI tool that concurrently runs a suite of linters (gofmt, govet, golint, staticcheck, errcheck, gocyclo, etc.) plus uni… | 23 | 3122 | maintenance |
| mplushnikov/lombok-intellij-plugin An IntelliJ IDEA plugin that adds support for Project Lombok annotations, making the IDE recognize Lombok-generated getters, setters, const… | 10 | 3075 | maintenance |
| github/VisualStudio The GitHub Extension for Visual Studio is a VSIX plugin that adds GitHub integration to Visual Studio 2015 and newer, living mostly in the … | 10 | 2520 | maintenance |
| hieunc229/copilot-clone Captain Stack is a VSCode extension that provides code suggestions similar to GitHub Copilot. Instead of relying solely on AI, it searches … | 32 | 1783 | maintenance |
| CodeShell CodeShell is a family of 7-billion-parameter code large language models developed by PKU-KCL, trained on 500 billion tokens with an 8192-to… | 28 | 1618 | maintenance |
| reenhanced/gitreflow git-reflow is a Ruby-based command-line tool that automates the git feature-branch workflow: it creates pull requests, enforces code review… | 23 | 1487 | maintenance |
| joshpxyne/gpt-migrate GPT-Migrate is a Python CLI tool that uses LLMs (GPT-4 via OpenAI or OpenRouter) to automatically migrate codebases from one framework or l… | 29 | 6972 | experimental |
| code-cracker/code-cracker Code Cracker is a Roslyn-based analyzer library for C# and Visual Basic that provides code diagnostics, refactorings, and code style analys… | 23 | 1147 | maintenance |
| vercel-labs/openreview OpenReview is an open-source, self-hosted AI code review bot that deploys to Vercel and connects to GitHub via a GitHub App. Mentioning @op… | 43 | 1696 | experimental |
| phacility/phabricator Phabricator is a self-hosted suite of web applications for software development, including code review (Differential), repository hosting (… | 32 | 12292 | abandoned |
| facebookarchive/mention-bot A GitHub webhook bot by Facebook that automatically mentions potential reviewers on pull requests based on file change history. It is archi… | 10 | 3336 | abandoned |
| sebastianbergmann/phpcpd PHPCPD is a Copy/Paste Detector command-line tool for PHP code that identifies duplicated lines and clone classes across a codebase. It is … | 10 | 2209 | abandoned |
| gojp/goreportcard Go Report Card is a web application and CLI that grades the quality of Go projects using checks like gofmt, go vet, golint, and gocyclo, pr… | 10 | 2174 | abandoned |
| brightcove-archive/ooyala_barkeep Barkeep is a self-hosted, standalone code review system for engineering organizations, built in Ruby. It tracks and reviews commits across … | 10 | 1417 | abandoned |
| zeke/semantic-pull-requests A Probot-based GitHub App that adds a status check ensuring pull requests follow the Conventional Commits spec, so semantic-release can tri… | 32 | 1233 | abandoned |
| bodil/eslint-config-cleanjs An ESLint shareable config that restricts JavaScript to a pure functional subset by banning this, classes, null, mutation, reassignment, an… | 10 | 1094 | abandoned |
| OpenCppCoverage OpenCppCoverage is an open-source C++ code coverage tool for Windows, primarily used to measure coverage of unit tests, with support for Vi… | 10 | 1004 | abandoned |
| addyosmani/agent-skills Agent Skills is a collection of production‑grade engineering workflows packaged as markdown skills for AI coding agents. It provides slash … | 82 | 101556 | active |
| alibaba/open-code-review OpenCodeReview is a hybrid architecture code review tool that combines deterministic pipelines with LLM agents to provide precise line‑leve… | 76 | 44064 | active |
| Kilo Kilo Code is an open-source (MIT) AI coding agent available as a VS Code extension, JetBrains plugin, and CLI, with cloud agents and a mode… | 84 | 27653 | active |
| cloudflare/security-audit-skill A coding-agent skill from Cloudflare that turns an LLM coding agent into a security auditor via a six-phase pipeline (recon, hunting, valid… | 56 | 26974 | active |
| .NET Compiler Platform (Roslyn) Roslyn is the open-source .NET Compiler Platform implementing the C# and Visual Basic compilers with rich code analysis APIs. It exposes co… | 67 | 20723 | stable |
| Semgrep Semgrep is a fast, open-source static analysis tool that searches code, finds bugs, and enforces secure coding standards using rules that l… | 95 | 16978 | active |
| pre-commit pre-commit is a framework for managing and maintaining multi-language Git pre-commit hooks. It automatically installs and runs hooks writte… | 88 | 15593 | stable |
| Untrivial-ai/agent-orchestrator Agent Orchestrator (AO) is a local desktop IDE for supervising fleets of AI coding agents like Claude Code, Codex, and Aider. It plans task… | 79 | 13330 | active |
| webpro-nl/knip Knip is a CLI linter that finds unused files, dependencies, and exports in JavaScript and TypeScript projects, including monorepos. It uses… | 93 | 12401 | active |
| bufbuild/buf Buf is a modern CLI toolchain for Protocol Buffers that replaces protoc with a fast compiler plus linting, formatting, breaking-change dete… | 97 | 11477 | active |
| jnMetaCode/superpowers-zh A Chinese community edition of the superpowers project that installs 20 battle-tested Markdown 'skills' (methodologies like brainstorming, … | 82 | 8341 | active |
| lintsinghua/DeepAudit DeepAudit is an open-source multi-agent AI system for automated code vulnerability discovery and security auditing, with a React frontend a… | 72 | 7178 | active |
| olimorris/codecompanion.nvim CodeCompanion.nvim is a Neovim plugin that integrates LLMs (Anthropic, OpenAI, Gemini, Copilot, Ollama, and more) and CLI coding agents (Cl… | 87 | 6872 | active |
| github/CopilotForXcode GitHub Copilot for Xcode is an AI coding assistant plugin for Xcode providing code completions, chat, agent mode, and code review for Swift… | 86 | 6338 | active |
| jihe520/MathModelAgent MathModelAgent is a multi-agent LLM application that automates mathematical modeling competitions end-to-end: it analyzes a problem, builds… | 87 | 6220 | active |
| vimeo/psalm Psalm is an open-source static analysis tool for PHP that finds type-related bugs and security vulnerabilities through type inference and t… | 98 | 5896 | active |
| AidLux (AidLearning) AidLux (originally AidLearning) is an AIoT development platform that runs a native Ubuntu Linux environment with GUI, deep learning tooling… | 63 | 5812 | active |
| mgechev/revive Revive is a fast, configurable, and extensible linter for Go, serving as a drop-in replacement for golint. It supports TOML-based rule conf… | 90 | 5554 | active |
| PMD PMD is an extensible multilanguage static code analyzer that finds common programming flaws like unused variables, empty catch blocks, and … | 97 | 5494 | stable |
| awslabs/aidlc-workflows AI-DLC Workflows is AWS's implementation of the AI-Driven Development Life Cycle methodology, packaged as adaptive workflow steering rules,… | 85 | 5426 | active |
| VibeSDK An open-source SDK for building your own vibe-coding platform where users describe full-stack apps and an AI coding agent plans, edits, dep… | 71 | 5401 | active |
| braedonsaunders/codeflow CodeFlow is a browser-based tool that turns any GitHub repository URL (or local files) into an interactive architecture map showing how fil… | 60 | 5399 | active |
| vitali87/code-graph-rag Code-Graph-RAG is a Python CLI tool and MCP server that parses multi-language codebases with Tree-sitter, builds a knowledge graph of code … | 86 | 5258 | active |
| phodal/auto-dev AutoDev is an AI-native multi-agent coding development platform built on Kotlin Multiplatform, distributed as an IntelliJ IDEA plugin, VS C… | 80 | 4548 | active |
| gptme gptme is a free, open-source personal AI agent that runs in the terminal, equipped with local tools for shell execution, code writing, file… | 98 | 4457 | active |
| zgsm-ai/costrict CoStrict is an open-source, enterprise-focused AI coding assistant delivered as VS Code and JetBrains extensions, offering strict-mode code… | 81 | 4444 | active |
| phpro/grumphp GrumPHP is a PHP code-quality tool implemented as a Composer plugin that registers git hooks in your repository. When a developer commits c… | 89 | 4316 | active |
| nyldn/claude-octopus A Claude Code plugin that orchestrates multiple AI model providers (Codex, Copilot, Gemini, Ollama, and others) against the same task, usin… | 79 | 4224 | active |
| crate-ci/typos typos is a fast source code spell checker written in Rust that finds and corrects spelling mistakes in codebases. It is designed for low fa… | 94 | 4182 | active |
| InfyOmLabs/laravel-generator InfyOm Laravel Generator is a PHP/Laravel package that generates complete CRUD scaffolding—migrations, models, controllers, repositories, r… | 23 | 3815 | active |
| antonbabenko/pre-commit-terraform A collection of git hooks for Terraform, OpenTofu, and Terragrunt driven by the pre-commit framework. It automatically formats code and run… | 98 | 3784 | active |
| swiftlang/swift-syntax A set of Swift libraries for parsing, inspecting, generating, and transforming Swift source code via a source-accurate syntax tree (SwiftSy… | 94 | 3710 | stable |
| Ataraxy-Labs/sem sem is a semantic version control CLI built on top of Git that parses code with tree-sitter and diffs, blames, and analyzes impact at the e… | 78 | 3400 | active |
| RuoYi-Vue RuoYi-Vue is a full-stack, front-end/back-end separated admin and permission management system built on Spring Boot, Spring Security, JWT, … | 77 | 3228 | active |
| qltysh/qlty Qlty CLI is a multi-language code quality tool written in Rust that unifies linting, auto-formatting, maintainability analysis, and securit… | 95 | 3194 | active |
| Chachamaru127/claude-code-harness A development harness plugin for Claude Code (and Codex CLI, Cursor, Grok) that enforces a disciplined Plan→Work→Review→Release loop with s… | 77 | 3160 | active |
| AutoCodeRoverSG/auto-code-rover AutoCodeRover is an autonomous software engineering agent that combines LLMs with code structure analysis to automatically resolve GitHub i… | 20 | 3100 | active |
| leigest519/OpenGame OpenGame is an open-source agentic framework for end-to-end web game creation from a single prompt, built around a reusable 'Game Skill' sy… | 57 | 3009 | active |
| jnsahaj/lumen Lumen is a fast terminal-based git diff viewer and code review TUI written in Rust, shipped as a single static binary. It offers side-by-si… | 83 | 2894 | active |
| tach-org/tach Tach is a CLI tool, written in Rust, that enforces dependency rules and public interfaces between Python modules to support a modular monol… | 86 | 2827 | active |
| nicepkg/aide Aide is a VSCode extension that brings AI-assisted coding features such as one-click code commenting, language/framework conversion, UI scr… | 20 | 2686 | active |
| ray-x/go.nvim A feature-rich Neovim plugin for Go development, written in Lua, integrating gopls LSP, treesitter, DAP debugging, and AI assistance. It co… | 76 | 2661 | active |
| oxsecurity/megalinter MegaLinter is an open-source code quality tool that runs over 50 linters and formatters covering 50 languages, 22 formats, and 21 tooling f… | 93 | 2615 | active |
| DannyMac180/sol-advisor Sol Advisor is a Codex-native plugin that orchestrates AI-driven software delivery through risk-gated routing, declaring a route (solo, del… | 54 | 2614 | active |
| find-sec-bugs/find-sec-bugs Find Security Bugs is a SpotBugs plugin that performs static security analysis of Java bytecode, detecting 144 vulnerability patterns inclu… | 52 | 2450 | active |
| learnhouse/learnhouse LearnHouse is a next-generation open-source learning management system (LMS) for creating, sharing, and selling educational content. It com… | 100 | 2404 | active |
| gnostic gnostic is a Go command-line compiler that converts OpenAPI descriptions between JSON/YAML and Protocol Buffer representations. It provides… | 63 | 2308 | active |
| ContiNew Admin ContiNew Admin is a full-stack, multi-tenant admin management framework/scaffold built on Spring Boot 3 (Java 17) and Vue 3 with Arco Desig… | 78 | 2131 | active |
| coder/xum Xum (formerly Mux) is an open-source desktop application for running multiple AI coding agents in parallel, each in its own isolated worksp… | 81 | 2057 | active |
| Zoo-Code-Org/Zoo-Code Zoo Code is an open-source AI coding assistant delivered as a VS Code extension (with JetBrains/Open VSX support), continuing development o… | 82 | 2020 | active |
| zzet/gortex Gortex is a high-performance code-intelligence engine that indexes codebases into a persistent knowledge graph using tree-sitter AST analys… | 78 | 1911 | active |
| Tencent/CodeAnalysis Tencent Cloud Code Analysis (TCA, code-named CodeDog) is a self-hosted static code analysis platform consisting of server, web, and client … | 42 | 1847 | active |
| netyouli/WHC_ConfuseSoftware A macOS (and Windows for some helpers) GUI application that obfuscates and 'renovates' mobile and game project source code across Objective… | 73 | 1798 | active |
| github/gh-stack A GitHub CLI extension for managing stacked branches and pull requests, written in Go. It automates creating branch chains, rebasing them, … | 83 | 1677 | active |
| skydoves/compose-stability-analyzer An IntelliJ/Android Studio plugin (with a Kotlin compiler plugin component) that analyzes Jetpack Compose composable functions' stability i… | 82 | 1658 | active |
| neovateai/neovate-code Neovate Code is an open-source AI coding agent that runs in the terminal to generate code, fix bugs, review code, and add tests. It support… | 56 | 1557 | active |
| workany-ai/workany WorkAny is a cross-platform desktop AI agent application (built with Tauri, React, and Hono) that executes tasks from natural language inst… | 65 | 1524 | active |
| Coframe/coffee Coffee is an AI-powered tool for building and iterating on React UI components directly from your IDE. It uses LLMs to generate and refine … | 64 | 1523 | active |