alibaba/open-code-review — Open-source & free — Battle-tested at Alibaba's scale.

Description and use

Alibaba’s open‑code‑review offers a battle‑tested, hybrid code‑review tool that combines deterministic pipelines with LLM‑agent intelligence to deliver precise, line‑level feedback on issues like NPE, thread‑safety, XSS, and SQL injection. Teams can start with a small proof‑of‑concept—checking the README and integrating the OpenAI/Anthropic‑compatible agent—to gradually scale up to repeatable, multi‑agent workflows and standardized tool‑use pipelines. With recent activity, strong GitHub traction (9.6k★), and a Go‑based codebase, the project shows high production readiness suitable for a serious pilot after a final license and security review.

Problem

alibaba/open-code-review helps turn isolated prompts and tools into repeatable agent workflows.

Outcome

High for an OSS candidate: recent activity, adoption, and ecosystem signals are strong enough for a serious pilot.

Workflow

• coordinate multi-agent workflows
• add tool-use pipelines
• standardize agent memory

Evidence

Open-source & free — Battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in fine-tuned ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

Source