{ "schema": "tesign-radar/item/1", "generated_at": "2026-09-17T01:56:13.055Z", "lang": "en", "slug": "open-code-review", "url": "https://tesign.com/en/item/open-code-review/", "alternates": { "ko": { "html": "https://tesign.com/item/open-code-review/", "json": "https://tesign.com/item/open-code-review/index.json", "markdown": "https://tesign.com/item/open-code-review/index.md" }, "en": { "html": "https://tesign.com/en/item/open-code-review/", "json": "https://tesign.com/en/item/open-code-review/index.json", "markdown": "https://tesign.com/en/item/open-code-review/index.md" } }, "name": "open-code-review", "use_label": "AI code review for developers", "one_liner": "Reviews code line by line with fixed rule pipelines plus an LLM agent.", "text": { "why": "Rule-only review tools miss a lot; review left to a model alone comes out uneven. open-code-review runs deterministic pipelines alongside an LLM agent and leaves line-level comments. It ships a multi-language ruleset covering NPE, thread safety, XSS and SQL injection, and works with both OpenAI and Anthropic models. Alibaba published it under Apache-2.0.", "take": "Splitting deterministic steps from the agent is a convincing answer to reviews that drift off the right line.", "build": [ "An internal review step that runs on every pull request", "A report that looks only at insecure patterns", "A team ruleset extended with your own internal rules" ], "who": [ { "role": "Team lead", "situation": "adds an automatic review step to CI for every PR" }, { "role": "Security owner", "situation": "checks for XSS and SQL injection patterns regularly" }, { "role": "Solo developer", "situation": "wants a second pair of eyes before merging" } ], "start": [ { "command": false, "text": "Needs Git 2.41 or newer" }, { "command": true, "text": "npm install -g @alibaba-group/open-code-review" }, { "command": true, "text": "ocr config provider" }, { "command": true, "text": "ocr config model" }, { "command": true, "text": "cd your-project" }, { "command": true, "text": "ocr review" } ], "caveat": [ "Needs an LLM provider and API key (except in delegation mode)", "It favours precision and states that recall is lower by design", "Benchmark figures come from the repository's own dataset" ] }, "cta": { "type": "try", "label": "TRY", "url": "https://open-codereview.ai/" }, "ready": null, "categories": [ "dev-tools", "security" ], "categories_confirmed": true, "tags": [ "code-review", "agents", "security" ], "platform": [ "windows", "macos", "linux", "cli" ], "license": { "spdx": "Apache-2.0", "scope": "permissive", "scope_text": "Commercial use, redistribution OK. Keep notices; mark changes.", "url": "https://spdx.org/licenses/Apache-2.0.html", "note": null, "open_source": true }, "language": "Go", "source_urls": { "canonical": "https://open-codereview.ai/", "github": "https://github.com/alibaba/open-code-review", "huggingface": null, "app_store": null, "sightings": [ { "source": "github", "url": "https://github.com/alibaba/open-code-review", "posted_at": "2026-09-12T22:00:00.000Z", "hn_url": null } ] }, "numbers": { "as_of": "2026-09-16T21:00:00.000Z", "stars": 28581, "stars_unit": "GitHub stars", "stars_checked_at": "2026-09-15T19:33:50.685Z", "stars_observed_since_check": 454, "star_delta_24h": 416, "star_delta_7d": 1064, "star_delta_30d": 1089, "star_delta_unit": "GitHub stars gained in the window, GH Archive events summed to as_of", "spark_14d": [ null, 7, 7, 6, 5, null, null, null, 21, 69, 96, 58, 447, 373 ], "hf_likes": null, "hf_likes_observed_at": null, "hn_points": null, "hn_points_observed_at": null, "store": null, "method": "Star total = the value last checked on GitHub (stars_checked_at) + increases observed via GH Archive since. The 24h · 7d · 30d gains are GH Archive hourly events summed to the reference time (as_of). No score of ours." }, "ranks": { "as_of": "2026-09-16T21:00:00.000Z", "all_time": null, "rising": { "24h": 1, "7d": 6, "30d": 11 }, "categories": [ { "category": "security", "label": "SECURITY", "rank": 3 } ] }, "activity": { "pushed_at": "2026-09-15T19:33:15.000Z", "owner_type": "Organization", "open_issues": 164, "contributors": 165, "releases_count": 126, "latest_release": { "tag": "v1.12.2", "published_at": "2026-09-15T09:19:58.000Z", "prerelease": false }, "checked_at": "2026-09-15T19:33:50.685Z", "core_checked_at": "2026-09-15T19:33:50.685Z" }, "signals": [ { "kind": "rising", "label": "RISING", "value": "+416 ★ / 24h" } ], "images": { "og": "https://tesign.com/img/open-code-review-157e8e3de1.png", "cover": "https://tesign.com/img/open-code-review-157e8e3de1.png", "cover_width": 2560, "cover_height": 1836, "gallery": [ "https://tesign.com/img/open-code-review-157e8e3de1.png", "https://tesign.com/img/open-code-review-c53611d9ec.jpg", "https://tesign.com/img/open-code-review-1c1b772672.webp" ], "alt": "The repository's own benchmark leaderboard: F1, precision, recall, time and tokens per model and review tool, in a dark table.", "tier": 2 }, "dates": { "first_seen_at": "2026-09-13T07:43:26.628Z", "source_created_at": "2026-05-18T02:16:36.000Z", "discovery_hours": 2837.4473966666665, "launch_signal_at": "2026-09-12T22:00:00.000Z", "kept_at": "2026-09-13T11:32:21.601Z", "first_published_at": "2026-09-13T11:32:21.881Z", "updated_at": "2026-09-15T04:36:56.922Z", "ingestion_mode": "live" }, "notes": [ "This file was produced by the same build, from the same data, as the tesign.com item page. The text is editorial; the numbers are stored observations.", "null in the JSON means not observed — never zero. The Markdown writes [unconfirmed] for it.", "Star total = the value last checked on GitHub (stars_checked_at) + increases observed via GH Archive since. The 24h · 7d · 30d gains are GH Archive hourly events summed to the reference time (as_of). No score of ours.", "A summary, not legal advice." ] }