# Install open-code-review with Homebrew, MacPorts, winget AI-powered code review tool with deterministic pipelines and an LLM agent. Version 1.13.4 via Homebrew; verified 2026-11-03. Also installable with macports: sudo port install open-code-review. ## Install ```sh sudo av install brew:open-code-review ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install open-code-review ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install open-code-review ``` Evidence: MacPorts ports tree: llm/open-code-review/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Windows - winget (92%): ```sh winget install --id Alibaba.OpenCodeReview -e ``` Evidence: Windows Package Manager source index: Alibaba.OpenCodeReview from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:open-code-review - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.13.4 - **Source summary:** AI-powered code review tool with deterministic pipelines and an LLM agent - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-11-03T19:00:00Z - **Generated:** 2026-11-04T12:20:42+00:00 ## Executables - ocr (cli) - ocr (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_tahoe, x86_64_linux ## Freshness - Page generated: 2026-11-04 - Package-manager version: 1.13.4 - Package-manager updated: 2026-11-03 - Local data: ok - Upstream repository: https://github.com/alibaba/open-code-review - Upstream latest detected: v1.13.5 (current) ## Project history and usage Open Code Review is Alibaba’s open-source AI-assisted code-review CLI. It reviews Git diffs or complete files and emits structured, line-level findings using deterministic pipelines and an LLM agent. ### Project history Open Code Review originated as Alibaba Group’s internal AI code-review assistant. Following two years of internal deployment, Alibaba incubated it as an open-source project. The public project centers on a hybrid architecture: deterministic pipelines control coverage, bundling, rule selection, and comment positioning, while an LLM agent retrieves context and writes review findings. ### Adoption history Alibaba states that the tool served tens of thousands of internal developers and identified millions of defects over two years before being released as an open-source project. The public CLI is distributed through npm, downloadable binaries, source builds, and Homebrew. The project also provides integrations for coding-agent skills, Claude Code plugins, GitHub Actions, and GitLab CI, extending it beyond interactive local reviews. ### How it is used Users configure an LLM endpoint, authentication token, and model, test connectivity with ocr llm test, then run ocr review against workspace changes, commit ranges, or individual commits. The ocr scan command audits complete files or directories. Configuration is stored in ~/.opencodereview/config.json. LLM credentials may instead be supplied through OCR-prefixed or compatible Anthropic environment variables; because no distinct credential file is documented, the credentials-file field is null. ### Why package nerds care Open Code Review packages an internally developed, large-scale review system as a portable Go CLI. It combines deterministic file selection and rule matching with LLM-driven contextual analysis rather than relying on an unconstrained general-purpose agent. Its multiple distribution and integration surfaces—native binaries, npm, Homebrew, CI, skills, and plugins—make it representative of the emerging AI developer-tool supply chain. ### Timeline - Internal era: Deployed within Alibaba for two years before open-source incubation. - Open-source era: Released publicly with CLI, agent, plugin, skill, and CI integration surfaces. ### Related projects - Related systems include Git, GitHub Actions, GitLab CI, Claude Code skills and plugins, OpenAI-compatible APIs, and Anthropic-compatible APIs. ### Sources - - ## Security Notes No matching local secret-handling manifest was found for open-code-review. Package metadata is still published here so future coverage has a stable package URL. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.opencodereview/config.json ## Credential files - Unix: ~/.opencodereview/config.json ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** open-code-review - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - MacPorts - open-code-review: normalized package name match | MacPorts ports tree: llm/open-code-review/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - winget - Alibaba.OpenCodeReview: normalized package name match | Windows Package Manager source index: Alibaba.OpenCodeReview from https://cdn.winget.microsoft.com/cache/source.msix ## Related links - [AI and agent packages](https://pkg.so/ai-agent-tools/) - Matched AI model, agent, coding-agent, orchestration, or MCP metadata. - [Networking and protocol packages](https://pkg.so/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [coderabbit](https://pkg.so/cask/coderabbit/) - Choose CodeRabbit CLI when you prefer a hosted AI-review product with GitHub and GitLab pull-request integration and repository-local YAML policy, rather than Open Code Review's self-selected LLM providers and deterministic local pipeline. Sources: · · ## Combined YAML source View the package source record on GitHub. [combined/open-code-review.yml](https://github.com/mxcl/pkgdb/blob/main/combined/open-code-review.yml) ## Sources - pkg.so package database - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - package relationship graph - external package-manager database matches - cross-ecosystem install command graph