Credentials. The GitHub and OpenAI keys must stay in your environment; never paste them into the report, issues, or logs.
Who it is forAn open-source maintainer who has a pull request waiting and wants a structured first pass before doing their own review.
The problemGathering changed files, finding patches that need attention, and writing up review notes takes time at the start of every review.
The outcomeA review.md file with findings, pull request metadata, statistics, skipped files, and a disclaimer that the maintainer reads and acts on.
What you need first
- Node.js 20 LTS or newer
- A checkout of the vuphongle/oss-pr-reviewer repository
- An OpenAI API key set as OPENAI_API_KEY (required for live reviews)
- A GITHUB_TOKEN is recommended to avoid anonymous GitHub API rate limits
- Network access to GitHub and OpenAI
Steps
- Clone the repository and run
npm installin the checkout. - Run
npm run buildto produce the dist folder. - Run
export GITHUB_TOKEN=...andexport OPENAI_API_KEY=...with your own values. - Run
node dist/cli/index.js review --repo owner/repository --pr 123 --min-severity medium --output review.md. (inferred, check the README) - Open review.md and check each finding against the pull request code before deciding anything.
Prompt for your agent
In the vuphongle/oss-pr-reviewer checkout, build the CLI and run node dist/cli/index.js review --url <pull-request-url> --output review.md. Confirm review.md exists and list the findings with their severity and file path, noting any skipped files or an incomplete status. Do not approve or merge the pull request.
Caveat. The tool reviews only the supplied pull request metadata and patches, not the full repository, and it never claims a pull request is correct or safe.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for vuphongle/oss-pr-reviewer and "Review one pull request and save a Markdown report"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer