Alibaba Open Sources OpenCodeReview for AI-Assisted Code Review

Alibaba's open‑sourcing of OpenCodeReview, an AI‑powered code review CLI that blends deterministic pipelines for file selection, bundling, and rule matching with an LLM agent for dynamic analysis, signals a new wave of developer‑focused bots that can crawl repositories and submit automated pull‑requests. For website owners, this means a surge in legitimate AI traffic that will probe source‑code directories, documentation sites, and CI/CD endpoints to evaluate code quality. Unlike generic crawlers, OpenCodeReview agents will request specific files, execute rule‑based checks, and potentially leave comments on public repos. This behavior can inflate bot metrics, trigger false positives in security alerts, and affect rate‑limit thresholds on APIs that host code snippets or developer portals. **Actionable tips:** 1. Update your llms.txt to explicitly list OpenCodeReview as an allowed bot, assigning it a “code‑review” role and a modest request‑per‑minute quota to prevent overload. 2. Deploy a dedicated endpoint in your bot‑tracking dashboard to tag traffic with the User‑Agent string “OpenCodeReview/CLI” so you can separate it from malicious crawlers and fine‑tune throttling rules. 3. Enable conditional logging for file‑selection requests, capturing path patterns (e.g., *.java, *.py) to audit compliance with your repository exposure policies.