pkg.soopen package index

brew / rank 3215

Install open-code-review with Homebrew, MacPorts, winget

AI-powered code review tool with deterministic pipelines and an LLM agent. Version 1.13.4 via Homebrew; verified 2026-11-03. Also installable with macports: sudo port install open-code-review.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install open-code-review

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install open-code-review

MacPorts ports tree · llm/open-code-review/Portfile · source: api.github.com

Windows

Windows Package Managerverified · 92%
winget install --id Alibaba.OpenCodeReview -e

Windows Package Manager source index · Alibaba.OpenCodeReview · source: cdn.winget.microsoft.com

overview

Package summary

AI-powered code review tool with deterministic pipelines and an LLM agent

Commands and aliases

  • ocr

history

Project history and usage

Open Code Review is Alibaba’s open-source AI-assisted code-review CLI. It reviews Git diffs or complete files and emits structured, line-level findings using deterministic pipelines and an LLM agent.

Project history

Open Code Review originated as Alibaba Group’s internal AI code-review assistant. Following two years of internal deployment, Alibaba incubated it as an open-source project.

The public project centers on a hybrid architecture: deterministic pipelines control coverage, bundling, rule selection, and comment positioning, while an LLM agent retrieves context and writes review findings.

Adoption history

Alibaba states that the tool served tens of thousands of internal developers and identified millions of defects over two years before being released as an open-source project. The public CLI is distributed through npm, downloadable binaries, source builds, and Homebrew.

The project also provides integrations for coding-agent skills, Claude Code plugins, GitHub Actions, and GitLab CI, extending it beyond interactive local reviews.

How it is used

Users configure an LLM endpoint, authentication token, and model, test connectivity with ocr llm test, then run ocr review against workspace changes, commit ranges, or individual commits. The ocr scan command audits complete files or directories.

Configuration is stored in ~/.opencodereview/config.json. LLM credentials may instead be supplied through OCR-prefixed or compatible Anthropic environment variables; because no distinct credential file is documented, the credentials-file field is null.

Why package nerds care

Open Code Review packages an internally developed, large-scale review system as a portable Go CLI. It combines deterministic file selection and rule matching with LLM-driven contextual analysis rather than relying on an unconstrained general-purpose agent.

Its multiple distribution and integration surfaces—native binaries, npm, Homebrew, CI, skills, and plugins—make it representative of the emerging AI developer-tool supply chain.

Timeline

  • Internal era: Deployed within Alibaba for two years before open-source incubation.
  • Open-source era: Released publicly with CLI, agent, plugin, skill, and CI integration surfaces.

Related projects

  • Related systems include Git, GitHub Actions, GitLab CI, Claude Code skills and plugins, OpenAI-compatible APIs, and Anthropic-compatible APIs.

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for open-code-review. Package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 5 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.opencodereview/config.json

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.opencodereview/config.json

executables

Installed executables

CommandKindExposureNote
ocrcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-11-04
manager version1.13.4
manager updated2026-11-03
local dataok
upstreamcurrent
latest detectedv1.13.5

https://github.com/alibaba/open-code-review

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:open-code-review
Version1.13.4
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/open-code-review
Homepagehttps://open-codereview.ai
Repositoryhttps://github.com/alibaba/open-code-review
Upstream docshttps://open-codereview.ai
LicenseApache-2.0
Source archivehttps://github.com/alibaba/open-code-review/archive/refs/tags/v1.13.5.tar.gz
Last updated2026-11-03T19:00:00Z
Pulseupdated
Build dependenciesgo
Bottleavailable (on arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_tahoe, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameopen-code-review
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

MacPorts95%

open-code-review

sudo port install open-code-review
  • normalized package name match
  • Matched by: Open Code Review
MacPorts ports tree · api.github.com · MacPorts ports tree: llm/open-code-review/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
winget95%

Alibaba.OpenCodeReview

winget install --id Alibaba.OpenCodeReview -e
  • normalized package name match
  • Matched by: Open Code Review
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Alibaba.OpenCodeReview from https://cdn.winget.microsoft.com/cache/source.msix

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database