TESIGN
SAVED

EN · KO

  1. TESIGN / RADAR
  2. open-code-review

open-code-review

AI code review for developers

WHO USES ITTeam lead · Security owner · Solo developer

Reviews code line by line with fixed rule pipelines plus an LLM agent.

★ 28.6k▲ +1,064 / 7dDaily star increases over 14 days. Hollow bars mean no data. The last day may be partial.2026-09-03 no data2026-09-04 +72026-09-05 +72026-09-06 +62026-09-07 +52026-09-08 no data2026-09-09 no data2026-09-10 no data2026-09-11 +212026-09-12 +692026-09-13 +962026-09-14 +582026-09-15 +4472026-09-16 +373largest one-day increase in the 14 days+447last 14 days · stars per dayhollow = no data

28,581 stars · checked on GitHub GitHub check 30 h late · incl. +454 observed via GH Archive since then · 7-day +1,064 observed via GH Archive (as of )

RANKS Rising this week #6 SECURITY #3

RISING +416 ★ / 24h

The repository's own benchmark leaderboard: F1, precision, recall, time and tokens per model and review tool, in a dark table.
The repository's own benchmark leaderboard: F1, precision, recall, time and tokens per model and review tool, in a dark table.
The repository's own benchmark leaderboard: F1, precision, recall, time and tokens per model and review tool, in a dark table.

TESIGN TAKE

Splitting deterministic steps from the agent is a convincing answer to reviews that drift off the right line.

TRY

AT A GLANCE

LICENSE
Apache-2.0
USAGE
Commercial use, redistribution OK. Keep notices; mark changes.
LANGUAGE
Go
PLATFORM
windows · macos · linux · cli
ACTIVITY
last commit 1 day ago () · latest release v1.12.2 () · 126 releases
COMMUNITY
165 contributors · 164 open issues (incl. PRs) · made by: an organization
SOURCES
GitHub
OPEN SOURCE
YES
FIRST SEEN
CATEGORY
DEV TOOLS · SECURITY

A summary, not legal advice.

WHY IT MATTERS

Rule-only review tools miss a lot; review left to a model alone comes out uneven. open-code-review runs deterministic pipelines alongside an LLM agent and leaves line-level comments. It ships a multi-language ruleset covering NPE, thread safety, XSS and SQL injection, and works with both OpenAI and Anthropic models. Alibaba published it under Apache-2.0.

BUILD FROM THIS

  • An internal review step that runs on every pull request
  • A report that looks only at insecure patterns
  • A team ruleset extended with your own internal rules

WHO IT'S FOR

Team lead
adds an automatic review step to CI for every PR
Security owner
checks for XSS and SQL injection patterns regularly
Solo developer
wants a second pair of eyes before merging

START IN 5 MINUTES

# Needs Git 2.41 or newer
$ npm install -g @alibaba-group/open-code-review
$ ocr config provider
$ ocr config model
$ cd your-project
$ ocr review

CAVEATS

  • Needs an LLM provider and API key (except in delegation mode)
  • It favours precision and states that recall is lower by design
  • Benchmark figures come from the repository's own dataset

RECEIPT

FIRST SEEN
AT SOURCE
KEPT
STAR DELTA
+416 ★ / 24h
CREATED → FIRST SEEN
118d
WHEN FIRST SEEN
22,814 ★
SOURCES
GitHub

The same facts in machine-readable form — View as Markdown · JSON

SIMILAR TOOLS

Up to five from DEV TOOLS by ★ total: edited entries first, then repository cards; this entry is highlighted. Drawn from the same stored snapshot as the rankings — a comparison, not a recommendation.

IMAGENAME★ TOTAL▲ 7dLICENSEPLATFORMLAST PUSH
ECC README banner: headline 'The operating system for AI agent harnesses', harness chips, and skill, agent and command lists.
eccSkills, memory and security for agents★ 259k▲ +832MITpermissivewindows · macos · linux · cli
DeepSeek Harness landing: blue background, the headline 'Everything is a plugin' and a quick-start box with the npx command.
DeepSeek HarnessPlugin agent harness for developers★ 225k▲ +1,356MITpermissiveweb · cli
ponytail.dev landing page: a line-drawn developer with a ponytail on black, the title 'ponytail' and an install button.
ponytailMake your agent write less code★ 139k▲ +1,068MITpermissive—
Spec Kit docs landing page — the headline 'Build with a spec, fix a bug, or assess an idea' and the uv tool install specify-cli command
Spec KitSpec-first process for coding agents★ 137k▲ +560MITpermissivecli · windows · macos · linux
The repository's own benchmark leaderboard: F1, precision, recall, time and tokens per model and review tool, in a dark table.
open-code-reviewAI code review for developersTHIS ENTRY★ 28.6k▲ +1,064Apache-2.0permissivewindows · macos · linux · cli

ALSO WORTH SEEING

PodroidLinux container VM for your phonePodroid's homepage: a dark screen reading "Linux containers on Android. No root required," with a Download APK button.Install to use
★ 2.6k▲ +14 / 7d
Boots a real, separately-kernelled Alpine Linux VM on an unrooted Android phone, running Podman, Docker and LXC exactly as they behave on a server.OpenHunterAILocal AI red-team workspaceOpenHunterAI's homepage, labelled "AUTHORIZED EXTERNAL SECURITY TESTING," listing its five-stage process from scope verification to reporting.Self-host
★ 165▲ +15 / 7d
An alpha-stage local workspace that runs attacker-style security assessments — strictly against public targets you own or are authorized to test.MartinLoopExecution-control CLI for coding agentsMartinLoop's homepage headline: "Watch your AI burn $5.20. Then watch MartinLoop close the loop for $2.30."
★ 130▲ +21 / 7d
Wraps a coding agent with a spend cap and a verifier, so "I'm done" comes with an evidence-backed receipt instead of just a claim.Spec KitSpec-first process for coding agentsSpec Kit docs landing page — the headline 'Build with a spec, fix a bug, or assess an idea' and the uv tool install specify-cli commandInstall to use
★ 137k▲ +560 / 7d
Makes your coding agent write the spec first, then plan, build and verify against it.

TIMELINE

  1. Repository created
  2. FIRST SEEN BY TESIGN