OpenCodeReview

oss-pr-reviewer is an AI-powered command-line tool for reviewing GitHub pull requests and producing structured Markdown or JSON reports for maintainers. It fetches pull-request metadata and changed-file patches with Octokit, normalizes reviewable content, skips binary, patchless, truncated, and oversized files with explanations, and splits large text diffs into deterministic batches without cloning or executing the repository code. The tool sends batched changes to OpenAI for structured findings, validates responses with Zod, then merges, deduplicates, orders, and filters findings by severity. It can apply repository-specific review rules and ignored paths from a trusted base-branch `.oss-pr-reviewer.yml` file, retry transient GitHub and OpenAI failures, and optionally publish bounded advisory reports through GitHub Actions. It requires Node.js 20 LTS or newer and, according to the repository, is run from a checkout because its package-ready release is not yet published to npm.

OpenCode is an open-source AI coding agent developed by anomalyco. It is used as a terminal-based coding agent and external coding harness, with a beta desktop application also available. The CLI includes a full-access build agent for development work and a read-only plan agent for code analysis and exploration; the plan agent denies file edits by default and asks permission before running shell commands. OpenCode also provides a general subagent for complex searches and multistep tasks, and can be installed through its shell installer, package managers, or platform-specific desktop packages.

Code Review Graph is an open-source, local-first code intelligence tool that provides a command-line interface and MCP server. It builds a persistent structural map of a codebase with Tree-sitter, representing relationships such as functions, classes, imports, calls, inheritance, and test coverage, while tracking changes incrementally. The graph supplies focused repository context to AI coding tools so they can read relevant code instead of repeatedly scanning large portions of a project. It also supports code-review workflows such as blast-radius analysis and risk-scored pull-request reviews. The Python package can be installed with pip or pipx; its install command detects supported AI coding platforms and configures MCP settings, hooks, skills, and graph-aware instructions.

An AI-powered code-review platform that automatically analyzes pull requests in repositories hosted on platforms such as GitHub and GitLab, producing review comments, summaries, and suggestions within source-control and code-hosting workflows.

Codex Security is an OpenAI CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in authorized code repositories. It scans directories and codebases, including repository changes, uses AI-assisted analysis to trace attack paths and apply custom threat models, validates findings, and can generate reviewable patches and exports in SARIF, JSON, and CSV formats. The CLI supports CI use with an API key and can stop builds at a selected severity threshold. The package also supports configurable deep scans, worker and subagent counts, time limits, containerized bulk scans, and a preview findings service. The service stores findings and embeddings in SQLite, provides paginated listings and a read-only dashboard, identifies potential duplicates through embedding similarity, and allows completed findings to be published and deduplicated through the CLI or SDK. It requires Node.js 22.13.0 or later and Python 3.10 or later, and can use OpenAI or other documented inference providers.