OpenCodeReview
by Alibaba
Official listing: built and published by Alibaba. More from Alibaba
Reviews pull requests with deterministic static analysis plus an LLM agent, posting line-level comments backed by rulesets for null-pointer, thread-safety, XSS, and SQL injection defects.
Use it now
Keep it with up to 9 other tools you're setting up, then share them all as one link.
Try this first
Ask your coding agent:
- Pull Request Review
Use OpenCodeReview to analyse a pull request diff: ‹what you need›
- Security Rulesets
Use OpenCodeReview to apply built-in rulesets: ‹what you need›
- Hybrid Pipeline
Use OpenCodeReview to combine deterministic analysers: ‹what you need›
Install the CLI
npm install -g @alibaba-group/open-code-review
Setup guide: github.com/alibaba/open-code-review
Call the API
Auth An API key from Alibaba
Setup guide: github.com/alibaba/open-code-review
Compare
Press Compare to add it to the tray at the bottom of the window, then pick up to 2 others anywhere on the site.
- Access
- CLIAPI
- Auth
- API Key
- Skills
- 3
Skills
Pull Request Review
Analyses a pull request diff and posts line-level review comments with suggested fixes.
Security Rulesets
Applies built-in rulesets for SQL injection, XSS, null-pointer, and thread-safety defects.
Hybrid Pipeline
Combines deterministic analysers with an LLM pass so findings stay reproducible across runs.