1.7%

of 1,784 commits were committed by an AI agent — a floor, not an estimate

1.7% agent · top contributor 30%11 contributors

org-wide

Adoption is broad. Many contributors are committing agent-authored work, which is what a real organisational rollout looks like.

agent commits

1,754

human commits

agent contributors

30%

largest contributor

Assisted or autonomous

30assisted

0autonomous

Assisted — a developer’s identity authored the commit and the agent added itself as co-author. The agent ran git commit during a working session, with a person there. Autonomous — a bot identity is the author, no human in the loop. Across the whole index, 93.7% of agent commits are assisted.

Agent share by month

Feb26

Mar26

Apr26

May26

Jun26

Jul26

Aug26

Sep26

Peak month: 3.7%. Bars are scaled to that peak, not to 100%.

Which agents

Claude Code	Anthropic	18	1%
GitHub Copilot	GitHub	7	0.4%
OpenAI Codex	OpenAI	4	0.2%
Cursor Agent	Anysphere	2	0.1%

Verify it yourself

Sample commits that matched. Every one links to GitHub — check the trailers.

fce697d4server: preserve websocket close code when proxying to outposts (#26090)Claude Code
bfbecabbweb: e2e tests for user switching (#24761)Claude Code
02cb34a2web: Flip the admin interface to path-based routing (#25008)Claude Code
c3d3835bcore: Serve interface shell for any if/admin and if/user subpath. (#23987)GitHub Copilot
4e092df1web, packages/geo, server/static: Air Gapped Maps Merge Branch (#24254)GitHub Copilot
d88d51e7web: rework ak-search-select dropdown as an anchored popover (retire ak-poGitHub Copilot
a3a29d06website/docs: stages cleanup (#21558)OpenAI Codex
abdff1c8flows: preserve signed background URLs in CSS (#21868)OpenAI Codex
89999402core: support hashed password in users API + automated install (#18686)OpenAI Codex
a5cc2c9dsources/oauth: allow long authorization URLs on OAuth sources (#24132)Cursor Agent
540c2810website/docs: document SCIM source trust model and security implications (Cursor Agent

What was excluded

Commits in window	3,609
Merge commits removed	−0
CI / dependency bots removed	−1,825
Considered	1,784

Bots are excluded from the denominator entirely. Counting dependabot as “AI-written code” is the fastest way to produce a meaningless number.

How this was measured

Measured over February–August 2026, cloned directly. Detection is deterministic string matching against signatures agents write about themselves — no heuristics, no style analysis. Merge commits and CI bots are excluded from the denominator. The figure is a floor: squash merges strip trailers, so real usage is higher. Contributor counts are aggregate — no individual is named.

Run it yourself: npx qmmit-cli goauthentik/authentik

Scan another repository

Try