{
  "$schema_doc": "https://gtmstacker.com/registry/schema/entry.schema.json",
  "stability": "emerging",
  "generator": "agentic-media-registry",
  "generated_at": "2026-09-16T00:00:00Z",
  "id": "com.gtmstacker.registry/tool/open-code-review",
  "type": "tool",
  "slug": "open-code-review",
  "canonical_url": "https://gtmstacker.com/registry/tool/open-code-review/",
  "title": "Open Code Review",
  "description": "Apache-2.0 AI code-review CLI that Alibaba ran internally for ~two years before open-sourcing it: it reads your git diff, runs the changed files through a hybrid deterministic-pipeline + LLM-agent pass with a built-in multi-language ruleset (null-pointer, thread-safety, XSS, SQLi), and posts line-level comments. Bring your own OpenAI- or Anthropic-compatible key, or use delegation mode so a coding agent's own model does the review. Installs from npm.",
  "category": "mcp-agents",
  "tags": [
    "mcp-agents",
    "code-review",
    "developer-tooling",
    "self-hostable",
    "byo-key"
  ],
  "status": "active",
  "revision": 1,
  "content_hash": "c4c1fc3f1b1c7ec0a39e16ed2c34f246e17333113dda49ec990266cd0b13de31",
  "date_published": "2026-09-16T00:00:00Z",
  "date_modified": "2026-09-16T00:00:00Z",
  "source": {
    "name": "github · alibaba/open-code-review",
    "url": "https://github.com/alibaba/open-code-review"
  },
  "license": "Apache-2.0",
  "one_liner": "Open Code Review runs a deterministic-plus-LLM pass over your git diff to post line-level comments, using Alibaba's internal ruleset and your own model key.",
  "open_source": "yes",
  "self_hostable": "yes",
  "pricing_model": "free",
  "who_its_for": "A team that wants an automated first-pass reviewer wired into its git flow — line-level flags on real defects before a human looks — without paying per-seat for a hosted code-review SaaS, and without sending diffs anywhere but the model provider it already uses.",
  "aliases": [
    "open-code-review",
    "OpenCodeReview",
    "Open Code Review"
  ],
  "alternatives": [
    "deepseek-harness"
  ],
  "secondary_categories": [
    "ai-infrastructure",
    "productivity-knowledge"
  ],
  "last_verified": "2026-09-16",
  "evidence": {
    "claim_type": "mixed",
    "source_id": "https://github.com/alibaba/open-code-review",
    "note": "Apache-2.0, the deterministic + LLM-agent architecture, built-in ruleset, BYO-key / delegation modes and npm distribution confirmed via the repo README (WebFetch + search 2026-09-16). Stars read north of 30k on 2026-09-16, up from a reported ~11.8k soon after the May 2026 release — treat as approximate. The published precision figures (~34% vs ~7%) are the project's own benchmark: a vendor claim, useful as direction, not independent."
  },
  "caveats": "Public since May 2026 — this is an established tool surfaced again via renewed virality, not a fresh launch; catalogued now because it was a genuine gap. The precision numbers are the project's own benchmark, so verify on your codebase before trusting them. Review quality still rides on the model key you supply.",
  "lead": "Apache-2.0 AI code-review CLI that Alibaba ran as its internal official reviewer for roughly two years before releasing it. It reads a git diff, sends the changed files through a hybrid deterministic-pipeline-plus-LLM-agent pass with a built-in multi-language ruleset (null-pointer, thread-safety, XSS, SQL injection), and returns structured, line-level comments. You supply…",
  "chunks": [
    {
      "index": 0,
      "heading_path": [],
      "est_tokens": 139,
      "text": "Apache-2.0 AI code-review CLI that Alibaba ran as its internal official reviewer for roughly two years before releasing it. It reads a git diff, sends the changed files through a hybrid deterministic-pipeline-plus-LLM-agent pass with a built-in multi-language ruleset (null-pointer, thread-safety, XSS, SQL injection), and returns structured, line-level comments. You supply your own OpenAI- or Anthropic-compatible model key, or run a delegation mode that hands the review to a coding agent's own model so no extra key is required. It installs from npm."
    },
    {
      "index": 1,
      "heading_path": [
        null,
        "Provenance"
      ],
      "est_tokens": 260,
      "text": "pass with a built-in multi-language ruleset (null-pointer, thread-safety, XSS, SQL injection), and returns structured, line-level comments. You supply your own OpenAI- or Anthropic-compatible model key, or run a delegation mode that hands the review to a coding agent's own model so no extra key is required. It installs from npm.\n\n- Apache-2.0, the deterministic + LLM-agent architecture, the built-in security ruleset, BYO-key / delegation modes and npm distribution independently verified via the repo and README (WebFetch + search 2026-09-16, github.com/alibaba/open-code-review). Stars read north of 30k on 2026-09-16, up from a reported ~11.8k two months after the May 2026 release — treat as approximate.\n- Surfaced via the 2026-09-16 viral-posts brief (a post reframing it as \"just open sourced\"); the provenance here corrects that — it has been public since May 2026 and is catalogued as an existing gap, not a new drop.\n- Curated from the GTM Stacker signal registry (2026-09-16 pass); license independently verified 2026-09-16."
    },
    {
      "index": 2,
      "heading_path": [
        null,
        "Why it matters for a GTM stack"
      ],
      "est_tokens": 254,
      "text": "the 2026-09-16 viral-posts brief (a post reframing it as \"just open sourced\"); the provenance here corrects that — it has been public since May 2026 and is catalogued as an existing gap, not a new drop. - Curated from the GTM Stacker signal registry (2026-09-16 pass); license independently verified 2026-09-16.\n\nA lot of the GTM stack is now code someone on the team vibe-shipped with an agent, and the review step is where that either gets caught or ships. Open Code Review is a self-hostable, bring-your-own-key first-pass reviewer that plugs into the git diff and flags real defect classes at the line level — the kind of thing teams usually rent from a per-seat SaaS. Two honest caveats keep it in proportion: it has been public since May, so it is not the fresh launch some posts imply, and the eye-catching precision numbers are the project's own benchmark, not an independent one. As an Apache-2.0 reviewer with a serious operational history behind it, it is worth wiring in and measuring on your own repo."
    }
  ],
  "alternates": {
    "markdown": "https://gtmstacker.com/registry/tool/open-code-review/index.md",
    "html": "https://gtmstacker.com/registry/tool/open-code-review/",
    "json": "https://gtmstacker.com/registry/tool/open-code-review/index.json",
    "server_json": "https://gtmstacker.com/registry/tool/open-code-review/server.json"
  },
  "jsonld": {
    "@context": "https://schema.org",
    "@graph": [
      {
        "@type": "WebSite",
        "@id": "https://gtmstacker.com/#website",
        "url": "https://gtmstacker.com/",
        "name": "GTM Stacker Agent Registry",
        "description": "A daily-updated, agent-native registry of open-source tool discoveries, tool updates, and curated news for the go-to-market / RevOps engineering niche. Machine-readable first: agents can discover, parse, page, and delta-sync it without scraping HTML.",
        "inLanguage": "en",
        "publisher": {
          "@id": "https://gtmstacker.com/#organization"
        }
      },
      {
        "@type": "Organization",
        "@id": "https://gtmstacker.com/#organization",
        "name": "GTM Stacker",
        "url": "https://gtmstacker.com",
        "description": "The growth-systems practice of Theo Popov: AI-native enrichment, outbound, content engines and internal tooling for startups and venture programs. Its agent-native media property, the GTM Stacker Agent Registry, maintains a daily-updated catalog of open-source go-to-market and RevOps tools that both people and AI engines can discover, compare, and cite.",
        "foundingDate": "2024-08",
        "knowsAbout": [
          "go-to-market engineering",
          "RevOps",
          "sales automation",
          "marketing operations",
          "open-source software",
          "AI agents"
        ],
        "founder": {
          "@type": "Person",
          "@id": "https://gtmstacker.com/#founder",
          "name": "Theo Popov",
          "jobTitle": "Growth Operations & GTM Systems",
          "url": "https://gtmstacker.com/about/",
          "sameAs": [
            "https://www.linkedin.com/in/theo-popov",
            "https://x.com/Theo_Popov",
            "https://github.com/theopopov"
          ],
          "worksFor": {
            "@id": "https://gtmstacker.com/#organization"
          }
        },
        "sameAs": [
          "https://www.linkedin.com/company/gtmstacker",
          "https://www.youtube.com/@gtmstacker",
          "https://www.instagram.com/gtmstacker/",
          "https://www.tiktok.com/@gtmstacker"
        ],
        "mainEntityOfPage": "https://gtmstacker.com/registry/about/"
      },
      {
        "@type": "SoftwareApplication",
        "@id": "https://gtmstacker.com/registry/tool/open-code-review/#software",
        "name": "Open Code Review",
        "identifier": "io.github.alibaba/open-code-review",
        "description": "Apache-2.0 AI code-review CLI that Alibaba ran internally for ~two years before open-sourcing it: it reads your git diff, runs the changed files through a hybrid deterministic-pipeline + LLM-agent pass with a built-in multi-language ruleset (null-pointer, thread-safety, XSS, SQLi), and posts line-level comments. Bring your own OpenAI- or Anthropic-compatible key, or use delegation mode so a coding agent's own model does the review. Installs from npm.",
        "applicationCategory": "DeveloperApplication",
        "url": "https://gtmstacker.com/registry/tool/open-code-review/",
        "datePublished": "2026-09-16T00:00:00Z",
        "dateModified": "2026-09-16T00:00:00Z",
        "isPartOf": {
          "@id": "https://gtmstacker.com/#website"
        },
        "license": "https://spdx.org/licenses/Apache-2.0.html",
        "codeRepository": "https://github.com/alibaba/open-code-review",
        "keywords": "mcp-agents, ai-infrastructure, productivity-knowledge, code-review, developer-tooling, self-hostable, byo-key",
        "author": {
          "@type": "Organization",
          "name": "alibaba",
          "url": "https://github.com/alibaba",
          "sameAs": [
            "https://github.com/alibaba/open-code-review"
          ]
        },
        "offers": {
          "@type": "Offer",
          "price": 0,
          "priceCurrency": "USD"
        },
        "isSimilarTo": [
          {
            "@type": "SoftwareApplication",
            "name": "DeepSeek Harness (dsh)",
            "url": "https://gtmstacker.com/registry/tool/deepseek-harness/",
            "applicationCategory": "DeveloperApplication",
            "offers": {
              "@type": "Offer",
              "price": 0,
              "priceCurrency": "USD"
            }
          }
        ]
      },
      {
        "@type": "BreadcrumbList",
        "@id": "https://gtmstacker.com/registry/tool/open-code-review/#breadcrumb",
        "itemListElement": [
          {
            "@type": "ListItem",
            "position": 1,
            "name": "GTM Stacker Registry",
            "item": "https://gtmstacker.com/registry/"
          },
          {
            "@type": "ListItem",
            "position": 2,
            "name": "MCP Agents",
            "item": "https://gtmstacker.com/registry/category/mcp-agents/"
          },
          {
            "@type": "ListItem",
            "position": 3,
            "name": "Open Code Review",
            "item": "https://gtmstacker.com/registry/tool/open-code-review/"
          }
        ]
      }
    ]
  },
  "tool": {
    "name": "io.github.alibaba/open-code-review",
    "repository": {
      "url": "https://github.com/alibaba/open-code-review",
      "source": "github"
    }
  }
}