open-code-review
by alibaba
Open Code Review is a command-line tool that reads your Git changes and uses an AI model to write line-by-line review comments. It is meant for catching bugs and security problems in code before it is merged.
- Stars
- 48.4k
- Licence
- Apache-2.0
- Runs on
- Your computer
- Setup
- Moderate
- Language
- Go
- Age
- 162 days
What you can do with it
- Review a Git diff and get line-level comments on bugs and security issues
- Scan whole files or folders to audit an unfamiliar codebase
- Run reviews in a CI pipeline using your own OpenAI or Anthropic compatible model
Make money with it
A freelance developer could offer code audit and security review services, using the tool to speed up the first pass before checking results by hand.
An idea, not financial advice. Check the licence before charging for anything built on it.
Ways a business could use it
- Add automated first-pass code review to a small team's pull requests, saving senior developer time
- Audit inherited or client codebases for common security flaws before taking on the work
Can you use it commercially?
Free to use, change and sell, including in paid products. Keep the copyright notice.
Not legal advice. Read the project's licence file before building a product on it.
Getting it running
Install it globally with npm (npm install -g @alibaba-group/open-code-review), have Git 2.41 or later, then configure a model endpoint.
Follow the official instructions in the project README.
Things to check
- Needs access to an LLM, so model API costs are likely unless you run your own endpoint
- Code is sent to the configured model provider, which may matter for private projects
- Recall is lower than general-purpose agents, so some issues may be missed
Who's talking about it
Checked 27 Oct 2026. Summary drafted by AI from the project's README.
