Best tools for Code Review

Modern open-source server management panel

1Panel is a modern open-source Linux server management panel built with Go that provides a clean web interface for managing websites, databases, containers, and system resources. It features a marketplace with 165+ one-click app installs including Nextcloud and Bitwarden, automatic SSL provisioning with Let's Encrypt, visual Docker container management, and built-in firewall configuration. 1Panel also supports native AI agent deployment through Ollama integration.

AWS managed AI code review for Java and Python

Amazon CodeGuru Reviewer is an AWS managed service that provides automated code analysis and recommendations on pull requests for Java and Python codebases. It integrates with GitHub, Bitbucket, and AWS CodeCommit, using machine learning trained on Amazon's internal code review practices to identify bugs, security vulnerabilities, and performance issues with IAM-based access control for enterprise governance.

Developer productivity platform with merge queues and flaky test detection

Aviator is a developer productivity platform combining merge queues, stacked PRs, automated code review, and flaky test management. Its merge queue prevents broken main branches by testing PRs in order before merging. Flaky test detection identifies unreliable tests causing CI failures. Founded by ex-Google engineers who built internal developer tools at scale. YC-backed with $2.3M seed from Elad Gil. Used by Bosch, Benchling, and Lightspeed.

Simple open-source personal cloud system

CasaOS is an elegant open-source personal cloud operating system that turns any hardware into a private home server with a one-line installation. It provides a beautiful web dashboard for managing Docker containers, a curated app store with one-click installs for tools like Nextcloud and Jellyfin, and built-in file management. CasaOS runs on Raspberry Pi, Intel NUC, old laptops, and cloud VMs with full support for Ubuntu, Debian, and Raspberry Pi OS.

Open-source IAM and SSO platform by Casbin

Casdoor is an open-source Identity and Access Management platform built by the Casbin community in Go and React. Supports OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, and MFA with a comprehensive web-based admin UI. Provides multi-tenant organization management, flexible RBAC and ABAC access control via Casbin models, and integrations with Google Workspace and Azure AD. Offers self-hosted deployment with optional managed cloud plans.

Enterprise application security testing platform

Checkmarx is an enterprise application security testing platform providing SAST, SCA, DAST, API security, IaC scanning, and container security in a unified solution. Features AI-powered vulnerability detection, automated remediation guidance, and correlation across scan types to prioritize the most critical risks. Supports 30+ programming languages with deep framework-specific rules. Integrates with all major IDEs, Git platforms, and CI/CD pipelines. Used by Fortune 500 companies globally.

AI reviewer that catches hallucinations in generated code

Codoki is a specialized AI code reviewer focused on catching hallucinations in code generated by autonomous agents like Devin and Claude Code. It validates that AI-proposed code actually functions according to provided requirements, serving as a critical safety layer for teams where AI agents generate a significant portion of the codebase and human review capacity cannot keep pace with generation speed.

Run a team of AI coding agents in parallel on your Mac

Web-based dashboard for monitoring and managing multiple AI coding agent sessions. Provides real-time visibility into what each agent is doing, resource consumption, and task progress across your team. Centralizes agent management so team leads can assign work, review outputs, and track productivity across multiple concurrent AI-assisted development workflows from a single interface.

Context engineering patterns for AI coding assistants

Context Engineering Intro is an open-source repository by Cole Medin providing structured context engineering patterns for AI coding assistants. Built around Claude Code, it includes .claude command files, PRP templates, and the WISC framework for managing AI context in coding sessions. The repo shows how to structure project context and rules so AI assistants produce reliable, architecture-aware code. With 13K+ GitHub stars, it is a go-to reference for context-first AI coding.

Open-source deep learning text-to-speech toolkit

Coqui TTS is an open-source deep learning toolkit for text-to-speech synthesis, originally built by former Mozilla TTS engineers. It supports multi-speaker and multilingual synthesis, voice cloning from just six seconds of audio, and ships pre-trained models for 20+ languages. After Coqui shut down in 2023, the Idiap Research Institute forked and actively maintains it. With 45K+ GitHub stars, it remains the most popular open-source TTS framework in Python.

AI-native AppSec that finds and fixes vulnerabilities

Corgea is an AI-native application security platform that uses LLMs to scan, triage, and automatically fix security vulnerabilities in code. Unlike traditional SAST tools that only detect issues, Corgea focuses on the remediation phase by generating context-aware fixes for vulnerabilities, significantly reducing the time engineering teams spend on security backlog while providing contextual PR reviews and IDE integrations.

End-to-end encrypted collaboration suite

CryptPad is an open-source end-to-end encrypted collaboration suite that provides real-time document editing, spreadsheets, presentations, kanban boards, whiteboards, and forms without the server ever accessing user content. Built as a privacy-first alternative to Google Workspace, CryptPad encrypts all data client-side so neither administrators nor attackers can read stored documents. It supports team drives, access control, and self-hosting.

Single-binary workflow engine with zero dependencies

Dagu is a local-first, self-contained workflow engine that runs as a single binary under 128MB of memory with no database, message broker, or runtime dependencies. Workflows are defined in declarative YAML and can orchestrate shell commands, Docker containers, SSH sessions, HTTP calls, and SQL queries. It includes a built-in Web UI with DAG visualization and Gantt charts, plus an AI agent that creates and debugs workflows from natural language via Slack or Telegram.

Open-source BI tool for data visualization

DataEase is an open-source business intelligence tool that enables anyone to perform data analysis and build visualizations through a drag-and-drop interface without coding. It connects to MySQL, PostgreSQL, Elasticsearch, ClickHouse, and other data sources, providing interactive dashboards that can be shared via links or embedded in applications. DataEase offers chart templates, calculated fields, and role-based access control for team collaboration.

Visual app builder for CRUD and admin tools

DronaHQ is a visual application builder for CRUD interfaces and admin tools that uses AI to assist in creating complex logic flows and database connections. It provides a low-code platform for building maintainable business applications at scale, targeting internal operations teams who need custom tools with database integrations, form builders, and workflow automation without full custom development.

AI-native SAST with contextual security analysis

DryRun Security is an AI-native SAST platform using Contextual Security Analysis to reason about code behavior, data flow, and exploitability instead of regex pattern matching. It provides PR-native security reviews on GitHub and GitLab, catching logic flaws, broken auth, IDOR, and injection bugs that legacy scanners miss while cutting 90% of noise. Features Natural Language Code Policies, DeepScan for full-repo audits, and a Risk Register for org-wide visibility. Supports 14+ languages.

Code management platform for AI coding agents

Entire is an AI-native code management platform designed for teams managing fleets of AI coding agents. Founded by former GitHub CEO Thomas Dohmke, it records the reasoning and instructions behind AI-generated code alongside the code itself, making agent-written software easier to review, audit, and maintain. Launches with Checkpoints, an open-source CLI tool that logs prompts and token usage for Claude Code and Google Gemini CLI, with more agent integrations planned.

Turn code and docs into a queryable knowledge graph

Graphify is an open-source AI coding assistant skill that transforms folders of code, documentation, research papers, and images into queryable knowledge graphs. It works as a skill for Claude Code, Codex, OpenCode, and other AI coding assistants. Using tree-sitter AST parsing for 19 programming languages and Claude vision for documents and images, it builds NetworkX graphs with Leiden community detection, outputting interactive HTML visualizations and structured JSON for codebase exploration.

Deploy web apps anywhere

Zero-downtime deployment tool created by 37signals (Basecamp/HEY) that deploys Docker containers to any VPS or bare metal server over SSH without requiring Kubernetes. Manages rolling deploys, health checks, SSL via Let's Encrypt, container registry, and load balancing with Traefik. Simple YAML-based config. Ideal for small teams deploying Rails, Node.js, or any Dockerized app. Ships as a Ruby gem. 12K+ GitHub stars and a growing alternative to complex container orchestration.

Find unused files, dependencies, and exports in JavaScript and TypeScript projects

Knip is an open-source CLI tool that detects unused files, dependencies, devDependencies, and exports in JavaScript and TypeScript codebases. It analyzes the full dependency graph to identify dead code that accumulates over time — especially relevant for AI-generated codebases where unused artifacts pile up faster than manual cleanup can handle. With over 10,800 GitHub stars, it has become a standard code hygiene tool in the JS/TS ecosystem.

Lightning-fast Rust-powered code editor

Lapce is an open-source code editor written in Rust, delivering sub-millisecond response times through native GPU rendering via wgpu. It features modal editing inspired by Vim, built-in LSP support for intelligent code completion, and a WASI-based plugin system supporting Rust, C, and AssemblyScript extensions. Includes integrated remote development over SSH, a built-in terminal, and split-pane layouts. Its rope-based text architecture ensures efficient handling of large codebases.

Run and fine-tune Vision Language Models locally on Mac

Open-source Python package for running and fine-tuning Vision Language Models locally on Mac using Apple's MLX framework. Supports multimodal inference with images, audio, and video across Qwen, DeepSeek, Phi, and Gemma architectures. Features OpenAI-compatible API server, Gradio chat UI, and KV cache optimization. 3.8K+ GitHub stars.

Blazing-fast PHP linter, formatter, and static analyzer in Rust

Mago is a comprehensive PHP toolchain written in Rust that unifies linting, formatting, and static analysis into a single binary. It enforces PER-CS formatting standards, catches code smells with 100+ lint rules, and performs deep type inference for semantic analysis. Inspired by Clippy and OXC from the Rust ecosystem, it delivers performance orders of magnitude faster than PHPStan and Psalm while requiring no PHP runtime to execute.

Low-code visual programming for event-driven apps

Node-RED is a flow-based, low-code development tool originally created by IBM in 2013 for wiring together hardware devices, APIs, and online services. Now an OpenJS Foundation project with nearly 23,000 GitHub stars, it provides a browser-based visual editor where flows are built by dragging and connecting nodes, then deployed to the Node.js runtime in a single click. Over 5,000 community-contributed nodes cover protocols like MQTT, Modbus, and OPC-UA alongside cloud APIs and databases.

OpenAI API management gateway for 100+ LLM providers

One API is a self-hosted LLM API gateway that provides a unified OpenAI-compatible interface for managing multiple model providers including OpenAI, Azure, Anthropic, Google, and dozens of Chinese providers. It handles load balancing, quota management, rate limiting, token tracking, and channel-based routing through a web dashboard. Widely adopted in the Chinese developer ecosystem with over 18,000 GitHub stars.

High-performance Rust JavaScript toolchain

Oxc is a high-performance collection of JavaScript and TypeScript tools written in Rust by the VoidZero team. It includes a parser, linter, formatter, transpiler, minifier, and module resolver that run 50x faster than their JS equivalents. Oxc powers Rolldown and integrates with Vite, forming the backbone of a unified Rust-based toolchain. With 20K+ GitHub stars and MIT license, it provides drop-in replacements for ESLint, Prettier, and Babel with dramatic speed gains.

Rust-powered JavaScript linter that is 50-100x faster than ESLint

Oxlint is an extremely fast JavaScript and TypeScript linter built as part of the OXC (Oxidation Compiler) toolchain written in Rust. It runs 50-100x faster than ESLint by parsing and analyzing code in a single optimized pass without requiring any plugins or configurations. Oxlint ships with 520+ built-in rules covering correctness, performance, and style checks, and is designed to run alongside ESLint during migration. Part of Evan You's VoidZero initiative, OXC has over 20,000 GitHub stars.

Automated PR workflow with AI review and labeling

ReviewPad automates the pull request workflow by applying team-defined rules for labeling, assigning reviewers, and providing AI-powered feedback on code changes. Its open-source GitHub repository supports custom automation scripts that standardize the review cycle, making it essential for mid-to-large teams enforcing governance without sacrificing development velocity across multiple repositories.

Agentic AI for software teams by Atlassian

AI-powered coding agent from Atlassian, deeply integrated with Jira, Bitbucket, and Confluence so it can validate code changes against acceptance criteria and plan multi-step development workflows aligned with team goals. Achieved 41.98% on SWE-bench full leaderboard at release. Available as both CLI and IDE integration, connecting project management and development within the Atlassian ecosystem.

Extremely fast Python linter and formatter written in Rust

Ruff is a Python linter and code formatter written in Rust by Astral that runs 10-100x faster than existing tools like flake8, isort, and Black. It implements over 800 lint rules from dozens of popular plugins in a single binary, handles auto-fixing for most violations, and includes a built-in formatter compatible with Black. Adopted by FastAPI, Hugging Face, Pandas, and Apache Airflow, Ruff has over 38,000 GitHub stars and processes entire codebases in milliseconds.

Multi-agent model API that orchestrates frontier models behind one OpenAI-compatible endpoint

Sakana Fugu is a hosted model-provider API that exposes a learned multi-agent system as one OpenAI-compatible model. It dynamically routes coding, code review, research, and reasoning tasks across a frontier-model pool, with Fugu for lower-latency work and Fugu Ultra for harder workloads where answer quality matters more than cost or speed.

Session reports for Claude Code and Codex runs

Spotlight by Backplanes turns completed Claude Code and Codex sessions into concise reports for engineering, security, and spend review. The CLI installs on macOS, Linux, or WSL 2, watches sessions after they finish, redacts PII and credentials locally before upload, then summarizes files touched, commands run, external domains reached, scope drift, risky actions, and next-session improvements.

Enterprise internal app platform with AI generation

Superblocks is an enterprise internal application platform that uses AI to automate backend integrations and UI generation for high-performance internal tools. It targets pro-developer teams who need more control than typical low-code platforms provide, offering code-level customization alongside visual building with enterprise features like SSO, audit logs, and fine-grained permissions.

Open-source GUI for managing AI coding agents with your own API keys

Unified desktop interface for Codex and Claude Code with a model selector dropdown. Features a git-integrated sidebar, parallel task and thread management, chat and plan modes, and customizable agent access levels. Run via desktop app or npx for instant access. Brings visual project management to terminal-based AI coding agents without sacrificing their command-line power.

Self-hosted AI accounting for freelancers and small teams

TaxHacker is an open-source, self-hosted AI accounting app that automatically extracts financial data from receipts, invoices, and bank statements using LLMs. It supports 170+ currencies and 14 cryptocurrencies with historical exchange rate conversion, multi-project accounting, and custom AI extraction fields. Works with OpenAI, Gemini, Mistral, or local models via Ollama—deploy with Docker and keep all financial data under your control.

Context-aware AI review with business logic validation

Umaku is a context-aware AI code review agent that understands full codebase and business logic context, detecting inconsistencies and assessing quality and risk beyond syntax-level analysis. It auto-generates and validates QA test cases from reviewed code, making it particularly effective for reviewing AI-generated code where product-intent validation matters more than style checking.

Lightweight microVM execution layer for AI agent code sandboxing

Vercel Sandbox provides a lightweight microVM execution environment for running untrusted code generated by AI agents safely. It creates isolated sandboxes that prevent generated code from accessing the host system, network, or other processes. Designed for AI coding platforms that need to execute user or agent-generated code without security risks to the host infrastructure.

CLI tool to convert codebases into LLM-ready prompts

code2prompt is a Rust CLI that converts entire codebases into structured prompts optimized for LLM context windows. It intelligently filters files using gitignore patterns, respects token budgets, generates directory tree visualizations, and supports custom Handlebars templates for output formatting. The tool addresses the core challenge of feeding large codebases to AI coding assistants by producing clean, organized context that maximizes the value of limited token budgets.

Hot-swap between local LLM models via OpenAI-compatible API

llama-swap is an open-source tool that manages multiple local LLM models behind a single OpenAI-compatible API endpoint. It automatically loads and unloads models on demand, letting developers hot-swap between different models without restarting services. With 3.1K+ GitHub stars, it solves the common pain point of running multiple specialized models on limited hardware.

LSP-based AI code review agent backed by Y Combinator

mrge is a YC-backed AI code review agent that uses Language Server Protocol analysis to provide deep, context-aware pull request reviews. It goes beyond surface-level pattern matching by understanding project structure, type information, and cross-file dependencies. Integrates with GitHub and GitLab to deliver automated reviews that catch logic errors, security issues, and architectural inconsistencies.

Static linter that catches production bugs in AI-generated code

prodlint is a zero-config static analysis tool with 52 rules targeting production bugs that AI coding tools consistently produce. It catches hallucinated npm imports, missing authentication checks, Prisma writes outside transactions, exposed secrets via NEXT_PUBLIC prefixes, and other patterns specific to code generated by Cursor, Claude Code, Bolt, and v0. Runs in one second via npx with no configuration needed.

Continuous local code-review loops for commits produced by AI coding agents

roborev is an MIT-licensed local review system that checks every commit in the background, stores findings in a review queue, and feeds actionable issues back into AI coding sessions. Git hooks, a TUI, branch and dirty-tree analysis, Codex and Claude agent hooks, plus iterative fix/refine commands turn review into a continuous agent workflow.