Ross ROSS = Recommend OSS · open-source software intelligence for agents

alibaba/open-code-review

Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible. observed · 2026-10-07

github.com/alibaba/open-code-review · homepage · Go · Apache-2.0 (permissive) observed · 2026-10-07

Health v2 · maintenance only

76/100

  • Activity 98
  • Release rhythm 86
  • Longevity 11

Flags: young

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: 0
  • age_days: 156
  • days_rel: 15
  • days_push: 15
  • n_releases_24m: 136

Full methodology

Adoption not part of the score

44064 stars · 3179 forks observed · 2026-10-07

What it is AI-extracted, prompt v1, taxonomy v1, 2026-09-28, confidence 0.97

OpenCodeReview is a hybrid architecture code review tool that combines deterministic pipelines with LLM agents to provide precise line‑level feedback. It includes built‑in multi‑language security rules and supports major LLM providers.

Use cases

  • automatically review pull requests for security issues like XSS and SQL injection
  • generate line‑by‑line code review comments using an LLM assistant
  • enforce coding standards across multiple languages in a CI pipeline
  • integrate AI‑driven code review into existing Git workflows
  • provide deterministic, reproducible review results alongside AI suggestions

When to choose

  • you need a scalable, enterprise‑grade code review system that leverages LLMs
  • your organization requires built‑in security rule checks for many programming languages
  • you want deterministic pipelines combined with AI flexibility
  • you prefer an open‑source solution with Apache‑2.0 licensing

When to avoid

  • you only need a simple linter or static analysis tool without AI integration
  • your environment cannot run Go binaries or Docker containers
  • you require a fully hosted SaaS code review service with no self‑hosting

Facets

application · maturity active

cli http-server api-framework llm-inference agent-framework code-review developer-tools windows cross-platform open-source hybrid-architecture deterministic-pipelines line-level-comments multi-language-ruleset security-scanning openai-compatible anthropic-compatible code-review ai-agents linux macos docker

2 sources

Member repositories

RepositoryRoleHealth v2
alibaba/open-code-reviewmain76

For agents

markdown · JSON · MCP: product_card(name="alibaba/open-code-review")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem