← the index
farhanashrafdev/90DaysOfCyberSecurity ↗
60%
of 5 commits were committed by an AI agent — a floor, not an estimate
Too little recent activity to publish. Only 5 commits landed in this window, so the percentage is noisy. Repositories below 100 are excluded from the index for this reason.
60% agent · top contributor 66.7%2 contributors
individual

One person is driving this. The headline number reflects a single contributor's workflow, not a project-wide shift.

3
agent commits
2
human commits
2
agent contributors
66.7%
largest contributor

Assisted or autonomous

3assisted
0autonomous

Assisted — a developer’s identity authored the commit and the agent added itself as co-author. The agent ran git commit during a working session, with a person there. Autonomous — a bot identity is the author, no human in the loop. Across the whole index, 93.7% of agent commits are assisted.

Agent share by month

Mar26
Sep26

Peak month: 100%. Bars are scaled to that peak, not to 100%.

Which agents

GitHub CopilotGitHub360%

Verify it yourself

Sample commits that matched. Every one links to GitHub — check the trailers.

  • f4a7c07aEnhance README with career-ops usage instructionsGitHub Copilot
  • e71de1d0Address review: rename ToC entry to Contributors, add version-pinning noteGitHub Copilot
  • e8fc8352Fix ToC anchors and dead links, add Start Here guide and career-ops job-seGitHub Copilot

What was excluded

Commits in window19
Merge commits removed−6
CI / dependency bots removed−8
Considered5

Bots are excluded from the denominator entirely. Counting dependabot as “AI-written code” is the fastest way to produce a meaningless number.

How this was measured

Measured over February–August 2026, cloned directly. Detection is deterministic string matching against signatures agents write about themselves — no heuristics, no style analysis. Merge commits and CI bots are excluded from the denominator. The figure is a floor: squash merges strip trailers, so real usage is higher. Contributor counts are aggregate — no individual is named.

Run it yourself: npx qmmit-cli farhanashrafdev/90DaysOfCyberSecurity

Scan another repository

Try