alibaba/open-code-review

▲ 1,571 stars today★ 26,211⑂ 1,891

Fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

26,211Star
1,891Fork
77Watch
162Issue
GoLanguage
Apache-2.0License
Created 2026-05-18 · last push 2026-09-15 · repository size 53367 KB · default branch main

README

https://github.com/alibaba/open-code-review/blob/HEAD/OpenCodeReview logo

OpenCodeReview

https://github.com/alibaba/open-code-review/blob/HEAD/alibaba%2Fopen-code-review | Trendshift https://github.com/alibaba/open-code-review/blob/HEAD/alibaba%2Fopen-code-review | Trendshift

https://github.com/alibaba/open-code-review/blob/HEAD/npm https://github.com/alibaba/open-code-review/blob/HEAD/Build status https://github.com/alibaba/open-code-review/blob/HEAD/License https://github.com/alibaba/open-code-review/blob/HEAD/Ask DeepWiki https://github.com/alibaba/open-code-review/blob/HEAD/OpenSSF Best Practices

https://github.com/alibaba/open-code-review/blob/HEAD/Windows https://github.com/alibaba/open-code-review/blob/HEAD/macOS https://github.com/alibaba/open-code-review/blob/HEAD/Linux https://github.com/alibaba/open-code-review/blob/HEAD/Claude Code https://github.com/alibaba/open-code-review/blob/HEAD/Codex https://github.com/alibaba/open-code-review/blob/HEAD/Cursor

English | 简体中文 | 日本語 | 한국어 | Русский

---

What is Open Code Review?

Open Code Review is an AI-powered code review CLI tool. It originated as Alibaba Group's internal official AI code review assistant — over the past two years, it has served tens of thousands of developers and identified millions of code defects. After thorough validation at massive scale, we incubated it into an open source project for the community. Simply configure a model endpoint to get started.

It reads Git diffs, sends changed files to a configurable LLM via an agent with tool-use capabilities, and generates structured review comments with line-level precision. The agent can read full file contents, search the codebase, inspect other changed files for context, and produce deep reviews — not just surface-level diff feedback. Beyond diff review, ocr scan reviews entire files for auditing unfamiliar codebases or directories that have no meaningful diff.

Visit the official website for more details.

Highlights

Benchmark

Compared to general-purpose agents (Claude Code), Open Code Review achieves significantly higher Precision and F1 with the same underlying model, while consuming only ~1/9 of the tokens and completing reviews faster. Note that its Recall is lower than general-purpose agents — a deliberate trade-off favoring precision over noise.

A real-world code review benchmark built from 50 popular open-source repositories, 200 real Pull Requests, and 10 programming languages — cross-validated by 80+ senior engineers (1,505 annotated ground-truth issues).

https://github.com/alibaba/open-code-review/blob/HEAD/Hugging Face Explore the AACR-Bench dataset on Hugging Face.

| Metric | What it measures | Why it matters | |--------|-----------------|----------------| | F1 | Harmonic mean of precision and recall | Best single number for overall review quality | | Precision | Proportion of reported issues that are real defects | Higher = fewer false alarms to triage | | Recall | Proportion of real defects that are found | Higher = fewer issues slip through review | | Avg Time | Wall-clock time per review | Matters for CI pipeline latency | | Avg Token | Total tokens consumed per review | Directly impacts API cost |

Benchmark

Why Open Code Review?

The Problem with General-Purpose Agents

If you've used general-purpose agents like Claude Code with Skills for code review, you've likely encountered these pain points:

The root cause: a purely language-driven architecture lacks hard constraints on the review process.

Core Design: Deterministic Engineering × Agent Hybrid

Open Code Review's core philosophy is to combine deterministic engineering with an agent, each handling what it does best.

Deterministic Engineering — Hard Constraints

For review steps that must not go wrong, engineering logic — not the language model — guarantees correctness:

Agent — Dynamic Decision-Making

The agent's strengths are concentrated where they matter most — dynamic decisions and dynamic context retrieval:

How to Use

Prerequisites

CLI

Install

npm install -g @alibaba-group/open-code-review

After installation, the ocr command is available globally.

For other installation methods (install script, GitHub Release binary, from source), see Installation.

Quick Start

1. Configure LLM

You must configure an LLM before reviewing code, unless you use Delegation Mode.

ocr config provider          # Select a built-in provider or add a custom one
ocr config model             # Pick a model for the active provider
Provider setup

The interactive UI guides you through provider selection, API key entry, and model configuration, then automatically tests connectivity.

For CLI setup, environment variables, custom providers, and other advanced configuration, see Configuration.

2. Review

cd your-project

Workspace mode — review all staged, unstaged, and untracked changes

ocr review

Branch range — reviews feature-branch's changes since it diverged from main (merge-base mode)

ocr review --from main --to feature-branch

Single commit

ocr review --commit abc123

Resume an interrupted range or commit review

ocr session list ocr review --from main --to feature-branch --resume

Full-file scan — review whole files instead of a diff (no git history needed)

ocr scan # scan the entire repository ocr scan --path internal/agent # scan a directory or specific files ocr scan --resume # resume an interrupted full-file scan

Save results to a file (recommended for AI host agents)

ocr review --format json --output result.json

Delegation mode — let your AI coding agent perform the review itself

OCR handles file selection and rule resolution; no LLM configuration needed

ocr delegate preview ocr delegate rule src/main.go src/handler.go

Documentation

Full documentation lives at open-codereview.ai/docs:

Contributing

This project exists thanks to all the people who contribute. See CONTRIBUTING.md for development setup, coding guidelines, and how to submit pull requests.

License

Apache-2.0 — Copyright 2026 Alibaba

More Today's Trending projects

1

JustVugg / colibri

C★ 32,549⑂ 3,425▲ 2,173 stars
2

multimodal-art-projection / YuE

Python★ 8,623⑂ 923▲ 559 stars
3

debpalash / VoiceStudio

Python★ 29,771⑂ 3,601▲ 2,776 stars
4

666ghj / MiroFish

Python★ 73,415⑂ 11,301▲ 560 stars
5

Panniantong / Agent-Reach

Python★ 81,600⑂ 7,099▲ 651 stars
6

asgeirtj / system_prompts_leaks

JavaScript★ 66,972⑂ 10,882▲ 764 stars