# open-code-review を Homebrew, MacPorts, winget でインストール open-code-review のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:open-code-review ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install open-code-review ``` 証拠: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install open-code-review ``` 証拠: MacPorts ports tree: llm/open-code-review/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Windows - winget (92%): ```sh winget install --id Alibaba.OpenCodeReview -e ``` 証拠: Windows Package Manager source index: Alibaba.OpenCodeReview from https://cdn.winget.microsoft.com/cache/source.msix ## パッケージ情報 - **パッケージキー:** brew:open-code-review - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 1.13.4 - **ソース概要:** AI-powered code review tool with deterministic pipelines and an LLM agent - **ホームページ:** - **リポジトリ:** - **上流ドキュメント:** - **ライセンス:** Apache-2.0 - **ソースアーカイブ:** - **最終更新:** 2026-11-03T19:00:00Z - **生成日時:** 2026-11-04T12:20:42+00:00 ## 実行可能ファイル - ocr (cli) - ocr (エイリアス) ## ビルド依存関係 - go ## インストール挙動 - post-install フック: 未定義 - Bottle: 利用可能 対象 arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_tahoe, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-11-04 - マネージャ版: 1.13.4 - マネージャ更新日: 2026-11-03 - ローカルデータ: OK - 上流リポジトリ: https://github.com/alibaba/open-code-review - 検出された最新: v1.13.5 (最新) ## プロジェクトの歴史と使われ方 Open Code Review is Alibaba’s open-source AI-assisted code-review CLI. It reviews Git diffs or complete files and emits structured, line-level findings using deterministic pipelines and an LLM agent. ### プロジェクトの歴史 Open Code Review originated as Alibaba Group’s internal AI code-review assistant. Following two years of internal deployment, Alibaba incubated it as an open-source project. The public project centers on a hybrid architecture: deterministic pipelines control coverage, bundling, rule selection, and comment positioning, while an LLM agent retrieves context and writes review findings. ### 採用の歴史 Alibaba states that the tool served tens of thousands of internal developers and identified millions of defects over two years before being released as an open-source project. The public CLI is distributed through npm, downloadable binaries, source builds, and Homebrew. The project also provides integrations for coding-agent skills, Claude Code plugins, GitHub Actions, and GitLab CI, extending it beyond interactive local reviews. ### 使われ方 Users configure an LLM endpoint, authentication token, and model, test connectivity with ocr llm test, then run ocr review against workspace changes, commit ranges, or individual commits. The ocr scan command audits complete files or directories. Configuration is stored in ~/.opencodereview/config.json. LLM credentials may instead be supplied through OCR-prefixed or compatible Anthropic environment variables; because no distinct credential file is documented, the credentials-file field is null. ### パッケージ好きにとっての重要性 Open Code Review packages an internally developed, large-scale review system as a portable Go CLI. It combines deterministic file selection and rule matching with LLM-driven contextual analysis rather than relying on an unconstrained general-purpose agent. Its multiple distribution and integration surfaces—native binaries, npm, Homebrew, CI, skills, and plugins—make it representative of the emerging AI developer-tool supply chain. ### タイムライン - Internal era: Deployed within Alibaba for two years before open-source incubation. - Open-source era: Released publicly with CLI, agent, plugin, skill, and CI integration surfaces. ### Related projects - Related systems include Git, GitHub Actions, GitLab CI, Claude Code skills and plugins, OpenAI-compatible APIs, and Anthropic-compatible APIs. ### ソース - - ## セキュリティノート open-code-review に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、パッケージメタデータはここに公開されています。 ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.opencodereview/config.json ## Credential files - Unix: ~/.opencodereview/config.json ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** open-code-review - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 他のパッケージマネージャ記録 - MacPorts - open-code-review: normalized package name match | MacPorts ports tree: llm/open-code-review/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - winget - Alibaba.OpenCodeReview: normalized package name match | Windows Package Manager source index: Alibaba.OpenCodeReview from https://cdn.winget.microsoft.com/cache/source.msix ## 関連リンク - [AI and agent packages](https://pkg.so/ja/ai-agent-tools/) - Matched AI model, agent, coding-agent, orchestration, or MCP metadata. - [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [coderabbit](https://pkg.so/ja/cask/coderabbit/) - Choose CodeRabbit CLI when you prefer a hosted AI-review product with GitHub and GitLab pull-request integration and repository-local YAML policy, rather than Open Code Review's self-selected LLM providers and deterministic local pipeline. ソース: · · ## Combined YAML source View the package source record on GitHub. [combined/open-code-review.yml](https://github.com/mxcl/pkgdb/blob/main/combined/open-code-review.yml) ## ソース - pkg.so package database - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - package relationship graph - external package-manager database matches - cross-ecosystem install command graph