{
  "schemaVersion": "qmmit.observation.v1",
  "datasetVersion": "2026-09-18-v3.0",
  "rulesetVersion": "sha256:b2e8889c66f72c18a61839f0bf1a9f77b5481ba2def044dba33c797b2f2bdcae",
  "scanDate": "2026-09-16",
  "observation": {
    "repo": "OWASP/CheatSheetSeries",
    "datasetVersion": "2026-09-18-v3.0",
    "rulesetVersion": "sha256:b2e8889c66f72c18a61839f0bf1a9f77b5481ba2def044dba33c797b2f2bdcae",
    "scanDate": "2026-09-16",
    "window": {
      "since": "2026-02-01",
      "untilExclusive": "2026-09-16",
      "label": "February–September 15, 2026"
    },
    "repository": {
      "sourceRepo": "OWASP/CheatSheetSeries",
      "canonicalRepo": "OWASP/CheatSheetSeries",
      "canonicalGitHubUrl": "https://github.com/OWASP/CheatSheetSeries",
      "defaultBranch": "master",
      "headShaAtResolution": "8aaf426de610ea603c21cf6a75222a6b7a30f820",
      "resolvedAt": "2026-09-16T12:09:27.525Z",
      "redirected": false
    },
    "agentSharePctFloor": 10.1,
    "humanSharePctCeiling": 89.9,
    "totals": {
      "commitsInHistory": 229,
      "mergeCommitsExcluded": 0,
      "ciBotCommitsExcluded": 40,
      "commitsConsidered": 189,
      "agentAttributedCommits": 19,
      "humanAttributedCommits": 170
    },
    "concentration": {
      "distinctAgentAuthors": 12,
      "topAuthorShareOfAgentCommits": 15.8,
      "adoptionPattern": "org-wide"
    },
    "mode": {
      "assistedCommits": 19,
      "autonomousCommits": 0,
      "assistedPct": 10.1,
      "autonomousPct": 0
    },
    "agents": [
      {
        "id": "claude-code",
        "label": "Claude Code",
        "vendor": "Anthropic",
        "commits": 10,
        "sharePct": 5.3,
        "samples": [
          {
            "hash": "1eacf6cb9bfcba006ca972a804c5faace8c2758a",
            "subject": "docs(CSP): note that prefetch-src was removed from CSP Level 3 (#2327)",
            "date": "2026-09-05T11:15:34+02:00"
          },
          {
            "hash": "c1a874a1642b01ba604a75846ac07f17287d3970",
            "subject": "docs: state what verifies a self-made patch in Case 3 (#2360)",
            "date": "2026-08-31T13:12:35+02:00"
          },
          {
            "hash": "b994fb6623eff9fac19e9d19697aedce77114074",
            "subject": "Vulnerable Dependency Management: add remediation and maintained backports to the Tools section (#2359)",
            "date": "2026-08-31T13:12:17+02:00"
          },
          {
            "hash": "dd0effb63d4fdd626a515545c75e68f44b01637f",
            "subject": "docs: add Case 5 on backporting a published fix to a pinned version (#2358)",
            "date": "2026-08-31T13:11:26+02:00"
          },
          {
            "hash": "91da93480b44f95e62a35e09cd0059de2c90c1c5",
            "subject": "Authentication: clarify why longer passphrases resist dictionary attacks (#2286)",
            "date": "2026-07-12T11:53:02-05:00"
          }
        ]
      },
      {
        "id": "copilot",
        "label": "GitHub Copilot",
        "vendor": "GitHub",
        "commits": 9,
        "sharePct": 4.8,
        "samples": [
          {
            "hash": "8aaf426de610ea603c21cf6a75222a6b7a30f820",
            "subject": "Rework the Java section of the XXE Prevention Cheat Sheet (#2405)",
            "date": "2026-09-15T13:37:52+02:00"
          },
          {
            "hash": "dbf07c1b0d549806f2ffc2a3d003bdcf5098596b",
            "subject": "Remove dead CSRF community link from cheat sheet (#2418)",
            "date": "2026-09-11T17:32:32+02:00"
          },
          {
            "hash": "862868592dcc17de4881846d8e7a78407e0c4e5f",
            "subject": "Fix terminology: behaviours -> behaviors in Authentication_Cheat_Sheet.md (#2375)",
            "date": "2026-08-31T13:01:40+02:00"
          },
          {
            "hash": "b799b499d52b530046aa35381e4d0a51ede5e087",
            "subject": "Improve guidance for passkey implementations in Authentication Cheat … (#2052)",
            "date": "2026-06-19T23:51:44+02:00"
          },
          {
            "hash": "c91e88a4dff49806e33f78665f6b8b540e946b57",
            "subject": "Potential fix for code scanning alert no. 5: Workflow does not contain permissions (#2079)",
            "date": "2026-03-26T10:00:18-07:00"
          }
        ]
      }
    ],
    "timeline": [
      {
        "month": "2026-02",
        "total": 18,
        "agent": 1,
        "agentPct": 5.6
      },
      {
        "month": "2026-03",
        "total": 29,
        "agent": 7,
        "agentPct": 24.1
      },
      {
        "month": "2026-04",
        "total": 22,
        "agent": 0,
        "agentPct": 0
      },
      {
        "month": "2026-05",
        "total": 31,
        "agent": 0,
        "agentPct": 0
      },
      {
        "month": "2026-06",
        "total": 28,
        "agent": 2,
        "agentPct": 7.1
      },
      {
        "month": "2026-07",
        "total": 11,
        "agent": 2,
        "agentPct": 18.2
      },
      {
        "month": "2026-08",
        "total": 36,
        "agent": 4,
        "agentPct": 11.1
      },
      {
        "month": "2026-09",
        "total": 14,
        "agent": 3,
        "agentPct": 21.4
      }
    ],
    "lowActivity": false
  }
}