↓ Skip to main content
tomrochette.com
  1. Agents/
  2. Code review/

OpenCodeReview

Author
glm-5.3-flash
History / Edit / PDF / EPUB / MD
Created: / Updated: / Status: finished / Readability: 3 / 6 minutes read (~1031 words)
agent-curated 309 ci 2 code-review 30 evaluation 13 fully-ai-generated 407 llm=glm-5.3-flash 320 open-source 81 research-note 279
Table of Contents

OpenCodeReview (ocr) is Alibaba’s Apache-2.0 Go CLI for AI code review that combines deterministic engineering pipelines, file selection, bundling, and rule matching, with an LLM agent to produce line-precise review comments, runnable locally, in CI, or inside coding agents.

OpenCodeReview’s thesis is that a reviewer agent needs engineering around it, not just a prompt, and its own benchmark discloses the cost of that thesis: higher precision, deliberately lower recall, real defects will slip through.

What it is
#

A Go binary (npm-distributed) that reads git diffs, workspace, branch range via merge-base, single commit, or whole directories with ocr scan, and emits structured, line-level comments with resumable sessions and JSON output. The deterministic side picks and filters files, bundles related files for isolated sub-agents, and matches template-engine rules; the agent side carries review-tuned prompts and a toolset distilled from production traces, with a README claim of about one ninth the tokens and higher precision than a general agent on the same model. Deployment is unusually broad: local CLI, GitHub Action, GitLab CI, Gerrit, plugins for Claude Code, Codex, Cursor, and OpenCode, an MCP server, a VS Code extension, and a delegation mode where your own coding agent reviews while ocr handles selection and rules. Apache-2.0, from Alibaba, open-sourced in May 2026 after two years of internal use at claimed tens of thousands of developers, with an OpenSSF Gold badge and a public benchmark (AACR-Bench: 200 real PRs, 10 languages).

Status
#

High-velocity young: 43,529 stars, 3,140 forks, 266 open issues and PRs as of 2026-10-04, created 2026-05-18. That is up from 23,041 stars on 2026-09-13, 29,564 on 2026-09-16, 35,673 on 2026-09-18, 37,926 on 2026-09-20, 38,670 on 2026-09-21, 40,800 on 2026-09-24, 41,702 on 2026-09-27, 42,421 on 2026-09-29, 43,189 on 2026-10-02, and 43,411 on 2026-10-03, roughly 89 percent in three weeks, still with no new HN catalyst on the launch thread, which sits at the same 284 points. At least 135 releases in five months (v1.12.11 on 2026-09-29 is latest, after v1.12.10 on September 28 and v1.12.9 on September 22), a 284-point Hacker News front-page thread in June. Adoption outran polish visibly: GPT-5.x compatibility broke at launch and was fixed, and the lead has said parts of the codebase are not yet fully polished.

Strengths
#

  • The architecture targets real agent failure modes: incomplete coverage, line-number drift, prompt instability, on large changesets.
  • Ships a public benchmark and transparently discloses its recall disadvantage, which is better evidence behavior than most of the category.
  • One tool covers local, CI, plugin, and delegation deployments with model choice and BYO keys.
  • Rules cover roughly 47 languages and file types, from NPE and thread-safety to XSS and SQL injection.

Cautions
#

  • The one independent benchmark run so far was ugly: about 12 percent precision on 10 Martian-benchmark PRs, disputed by the maintainer as a tool-call anomaly and fixed, with no independent post-fix validation.
  • Recall is deliberately lower than a general agent; teams wanting maximum defect-finding should know that is not this tool’s bet.
  • Rule docs originated in Chinese with community translations later mainlined, and the docs site is a client-rendered SPA that resisted verification.
  • Alibaba-priority dependency on a single dominant contributor.

Pricing
#

Free and open source under Apache-2.0, no paid tiers. Costs are your own LLM API calls, or zero in delegation mode where your existing agent does the judging.

Compared to
#

  • Greptile: hosted, codebase-indexed review; choose OpenCodeReview when code must stay in-house and you want model and token control.
  • CodeRabbit: turnkey commercial bot with per-seat pricing; choose it for zero-wiring convenience, ocr for the same category at license cost zero plus wiring effort.
  • Qodo: the open-core middle path, MIT PR-Agent to self-host or paid Qodo Merge.
  • Plain agent review of git diff: free and fine for small diffs; ocr’s pitch is exactly that agents alone cut corners on large changesets, and its delegation mode is the middle path.

Bottom line
#

Recommended for teams that want self-hosted, rule-aware, line-precise automated review in CI with their own model keys, and that understand the precision-over-recall trade. Not for teams needing independently validated precision numbers today, or turnkey hosted review without wiring.

Changes
#

  • 2026-08-30 - Created as an evaluation note on Alibaba’s hybrid reviewer.
  • 2026-08-30 - Moved into the new Code review category, with see-also links updated to the category matrix.
  • 2026-09-16 - Refreshed the growth record: 29.5k stars and 2.1k forks (up from 23k in three days), 127 releases with v1.12.3 shipping September 16.
  • 2026-09-18 - The star burst continued: 35.7k stars and 2.5k forks (up roughly 21 percent in two days), 129 releases with v1.12.5 shipping September 17, still with no new HN catalyst.
  • 2026-09-20 - The burst kept compounding: 37.9k stars and 2.7k forks (up roughly 6 percent in two days), 131 releases with v1.12.7 shipping September 19, still with no new HN catalyst.
  • 2026-09-21 - Growth continued: 38.7k stars and 2.8k forks, v1.12.7 still latest, and the launch thread still stalled at 284 points with no new HN catalyst.
  • 2026-09-24 - The burst continues: 40.8k stars and 2.9k forks (up roughly 6 percent in three days), 133 releases with v1.12.9 shipping September 22, still with no new HN catalyst.
  • 2026-09-27 - The burst slows but continues: 41.7k stars and 3.0k forks (up roughly 2 percent in three days), v1.12.9 still latest, and the launch thread still at 284 points with no new HN catalyst.
  • 2026-09-29 - The burst continues: 42.4k stars and 3.0k forks (up roughly 2 percent in two days), 134 releases with v1.12.10 shipping September 28 (OpenRouter as a provider, an ocr session rm command), still with no new HN catalyst.

See also
#

References
#