All 18 Dependencies
Every package open-code-review depends on, ranked by repo health score.
Open Code Review is an AI-powered code review CLI that originated as Alibaba Group's internal official code review assistant. Over two years it served tens of thousands of developers and caught millions of code defects at production scale before being open-sourced for the broader community. The core idea is simple to configure — point it at any OpenAI-compatible or Anthropic endpoint and run `ocr review`.
Unlike general-purpose agents that send raw diffs to a language model and hope for the best, Open Code Review wraps the LLM in a deterministic engineering harness. File selection, bundling of related files into sub-agent contexts, and per-language rule matching all happen before the model sees a single token. The result is consistent, predictable coverage with no file-skipping on large changesets, precise line-number attribution for every comment, and token consumption roughly one-ninth that of a raw general-purpose agent approach on the same diff.
The built-in ruleset covers language-specific patterns across Java, TypeScript/JavaScript, Go, Rust, Kotlin, C/C++, and configuration formats like YAML, JSON, and Maven POM files. Rules target high-value classes of bugs — NPE chains, thread-safety violations, XSS injection, SQL injection, dead code, and logic boundary errors — keeping the model focused and comment noise low.
Integration paths are flexible: a global npm install exposes the `ocr` CLI, pre-built binaries cover all major platforms, and ready-made workflow files enable automated PR review in GitHub Actions and GitLab CI. It also ships as a Claude Code plugin and a Codex plugin for inline agent-driven reviews.
