open-code-review

Read the source on GitHub Project homepage

What it does

An editorial selection.

AI code-review CLI that Alibaba ran internally for two years. Combines deterministic analysis with an LLM over git diffs.

Why it is listed

Battle-tested at scale and works with any model endpoint. Easy to drop into CI.

GitHub describes it as: Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

Counts were observed on 27/10/2026, 23:15:40 UTC. Observations older than 36 hours are excluded from current movement rankings.

Repository at a glance

Stars: 48,606
Forks: 3,558
Open issues: 139
Merged PRs: 630
Commits, last 30 days: 39
Stars, 7 days: unavailable
Stars, 30 days: unavailable

Counts observed on 27/10/2026, 23:15:40 UTC. Growth uses complete dated windows; see Methodology.

History

History: 2 observations, 2026-10-27 to 2026-10-28. Dots are observations; lines connect consecutive daily observations only.

Project details

Language: Go
Licence: Apache-2.0
Created: 18 May 2026
Last push: 22 Oct 2026
Latest release: v1.13.3 · 22 Oct 2026
Category: Security
Topics: agent code-review code-review-assistant harness repository-level-context agent-skills
Observed: 2026-10-27 23:15:40 UTC

Explore and get started

Use the project's own documentation for supported platforms, dependencies and installation steps. The README and release notes are maintained by alibaba.

Read the README and setup instructionsFeatures, prerequisites, examples and documentation links.
Browse releases and changelogsPublished versions and the changes made between releases.
Check licence and usage termsApache-2.0 is the licence reported by GitHub; read the repository terms before use.
Read pull requestsProposed changes and development discussions.
Browse reported issuesKnown problems, feature requests and maintainer responses.

Development context

These are observations of work in the repository. They do not establish quality, security or support commitments.

Total commits on default branch: 815
Open pull requests: 219
Closed issues, lifetime: 424
Median time to close an issue: 18.7 days
Median time to merge a pull request: 6.0 days

Close and merge times use up to 20 most recently updated closed issues or merged pull requests. They omit unresolved work and are context, not a maintenance score. Sample limits.

Other projects in Security, ordered by shared topics and then name. These are discovery links, not equivalence claims.