Alfredo Pinto

Alibaba just open-sourced something insane. An AI code reviewer that reportedly uses 9x fewer tokens than Claude Code while delivering more precise reviews. It catches bugs, security flaws, and mistakes before they reach production. And it's FREE and open source. It's called Open Code Review. No paid seats. No vendor lock-in. No AI quietly skipping half the files in your PR. This was Alibaba's official internal code reviewer for two years. Tens of thousands of their developers used it, and it flagged millions of defects before they released it to the public. Here's what this thing can do: → Reviews your Git diff with comments pinned to the exact line → Built-in rules for null pointer bugs, thread-safety, XSS and SQL injection → Reads full files and searches your codebase for context, not just the diff → Scans whole codebases with no diff needed → Plugs into Claude Code, Codex, Cursor, Kimi Code and OpenCode → Runs in GitHub Actions, GitLab CI and Gerrit → Works with OpenAI and Anthropic compatible models Here's why it beats general-purpose agents: Agents that review with prompts alone skip files on big PRs, drift on line numbers, and swing in quality with tiny prompt changes. Open Code Review hard-codes the parts that can't go wrong. Code picks the files, bundles related ones, and matches the rules. The AI only handles the judgment calls. Here's the wildest part: Alibaba benchmarked it on 200 real pull requests from 50 open-source repos across 10 languages. 80+ senior engineers labeled 1,505 real issues. Same underlying model. Higher precision and F1 than Claude Code. About 1/9 of the tokens. Faster reviews. The honest trade-off: it finds fewer total issues. On purpose. Less noise, fewer false alarms. npm install -g @alibaba-group/open-code-review github.com/alibaba/open-code…