- #727 — guarded option-like refs before they reach
git grep— 5 Aug 2026 - #660 — made parent commands fail instead of exiting 0 on unknown subcommands — 3 Aug 2026
- #653 — fixed npm detection in the VS Code extension on Windows — 1 Aug 2026
alibaba/open-code-review is Alibaba's AI code review tool. It ran as an internal assistant for two years before being open-sourced.
#727 — an option-like ref reaching git grep.
Git reads a value starting with - as a flag, not a branch name. One of those flags, -O, tells git to open results in a pager of your choosing — which means running a command. The refs were already validated upstream, so this wasn't an open hole. What made it worth fixing is that the existing separator guard, --end-of-options, isn't accepted before the revision on git older than 2.45 — so on those versions it wasn't guarding anything. I rejected option-like refs outright, at the point the command is built.
#660 — a CLI that exited 0 on commands it didn't recognise. An unknown subcommand printed help and exited 0. Exit 0 means success, so any CI pipeline calling it would read a broken run as a passing one. Five parent commands had it. The root command already did it right.
#653 — Windows couldn't find npm.
On Windows npm is npm.cmd, and the spawn the extension used doesn't resolve .cmd without shell mode. So it told people npm wasn't installed when it was.
Small fixes. All three shipped with tests.
I read the code, found things that were broken, and sent patches.
Repo: github.com/alibaba/open-code-review · Me: github.com/aalhadxx