Source: https://seerepo.com/compare/alibaba/open-code-review/vs/google/osv-scanner
Markdown source: https://seerepo.com/compare/alibaba/open-code-review/vs/google/osv-scanner.md
Description: open-code-review and osv-scanner share 3 technologies: MCP, charm.land/lipgloss/v2, and Model Context Protocol. Both are written in Go.

# open-code-review vs osv-scanner

open-code-review and osv-scanner share 3 technologies: MCP, charm.land/lipgloss/v2, and Model Context Protocol. Both are written in Go.

- [alibaba/open-code-review](https://seerepo.com/r/alibaba/open-code-review): Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
- [google/osv-scanner](https://seerepo.com/r/google/osv-scanner): Vulnerability scanner written in Go which uses the data provided by https://osv.dev

## What they share and what sets them apart

- In common: MCP, charm.land/lipgloss/v2, Model Context Protocol
- Only in open-code-review: net/http, OpenAI, Anthropic, Preact, React, react-router-dom, charm.land/bubbletea/v2, charm.land/bubbles/v2, openai-go, Coder, github.com/pkoukk/tiktoken-go, OpenTelemetry, github.com/aws/aws-sdk-go-v2/config, Tailwind CSS, Mermaid, three, dompurify, marked, @opencode-ai/plugin
- Only in osv-scanner: github.com/jedib0t/go-pretty/v6, charm.land/glamour/v2

## Side by side

| | open-code-review | osv-scanner |
|---|---|---|
| Size | 190,294 lines written, 325 code files | 45,296 lines written, 123 code files |
| Who writes it | 2.2% of its commits signed by AI. With Claude Code, Cursor, Codex, and Warp | 0.6% of its commits signed by AI. With Jules and Gemini CLI |
| Activity | Last push November 13, 2026, 854 commits, 50,096 stars | Last push November 12, 2026, 2,132 commits, 11,500 stars |
| Tests | 403 test files. 70.2% of its code files have a test that imports them | 112 test files. 65.9% of its code files have a test that imports them |

- Size: Lines written by people and agents, without generated ones; code files, without tests.
- Who writes it: A commit counts as AI's when it carries its signature: a Co-Authored-By line, its author name or the merge of its branch.
- Activity: From GitHub and its history, on the day SeeRepo read it.
- Tests: The files that test the code, and the share of code files a test imports.

## Frequently asked questions

### Which is bigger, open-code-review or osv-scanner?

open-code-review, with 190,294 lines written; osv-scanner has 45,296.

The proof: [alibaba/open-code-review's code at commit 0e9060d](https://github.com/alibaba/open-code-review/tree/0e9060da66af36a96a15516e76a001953095318b)

### Which has more GitHub stars, open-code-review or osv-scanner?

open-code-review, with 50,096 stars; osv-scanner has 11,500.

The proof: [alibaba/open-code-review on GitHub](https://github.com/alibaba/open-code-review)

### Which has more tests, open-code-review or osv-scanner?

open-code-review, with 403 test files; osv-scanner has 112.

The proof: [alibaba/open-code-review's code at commit 0e9060d](https://github.com/alibaba/open-code-review/tree/0e9060da66af36a96a15516e76a001953095318b)

### Which was updated more recently, open-code-review or osv-scanner?

open-code-review: its last push was on November 13, 2026, and osv-scanner's on November 12, 2026.

The proof: [alibaba/open-code-review's commits on GitHub](https://github.com/alibaba/open-code-review/commits)

### Which has more commits signed by AI, open-code-review or osv-scanner?

open-code-review: an AI signed 2.2% of its commits, with Claude Code, Cursor, Codex, and Warp; in osv-scanner, 0.6%.

## Sources

- alibaba/open-code-review: Read on November 13, 2026, at commit 0e9060d (https://github.com/alibaba/open-code-review/tree/0e9060da66af36a96a15516e76a001953095318b)
- google/osv-scanner: Read on November 12, 2026, at commit 80fe505 (https://github.com/google/osv-scanner/tree/80fe50567a5d6e0ec408353e2ceacca1561b91be)

## What is your repo built with?

Any public repo, with no account: https://seerepo.com/r/owner/repo/built, with the owner and name it has on GitHub.