- Dataset
- 2026-10-27-catalog-ai-v2
- Ruleset
- b2e8889c66f7
- Scanned
- 2026-10-27
- Window
- February–September 15, 2026
Open-source security automation platform for teams and AI agents
01Result
TracecatHQ/tracecat ↗TracecatHQ/tracecat AI coding statistics: 8.4%
A small group is using agents. Adoption has spread beyond one person but is not project-wide.
02Drivers
What shapes this result
Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.
Assisted or autonomous
Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached.
Agent share by month
| Month | Agent share | Considered commits |
|---|---|---|
| 2026-01 | 100% | 3 |
| 2026-02 | 6.8% | 355 |
| 2026-03 | 3.7% | 241 |
| 2026-04 | 18.5% | 135 |
| 2026-05 | 2.8% | 144 |
| 2026-06 | 14.9% | 87 |
| 2026-07 | 2.5% | 121 |
| 2026-08 | 1.7% | 118 |
| 2026-09 | 25.5% | 110 |
Peak month: 100%. Bars are scaled to that peak, not to 100%.
Which agents
| Agent | Vendor | Commits | Share |
|---|---|---|---|
| Claude Code | Anthropic | 81 | 6.2% |
| Devin | Cognition | 28 | 2.1% |
| Cursor Agent | Anysphere | 3 | 0.2% |
03Evidence
Inspect the matches
Public commit samples let you inspect the signatures behind the aggregate result.
Matched commit samples
3127f3f5on GitHubrefactor(agents): drop pydantic ai (#3367)Claude Codeeeebe3f7on GitHubci: reject GitHub's revert titles in favour of revert(scope) (#3375)Claude Code22c6a58eon GitHubfix(integrations): register refresh_token grant and request offline_a… (#3Claude Code9d45108eon GitHubfeat(api): add workflow draft read/replace endpoints (#3522)Devinc090b0cfon GitHubfeat(api): return resource bodies from create and update endpoints (#3523)Devinb91297a4on GitHubfix(ui): restore Tailwind peer/group variants dropped by selector parser (Devinbf149371on GitHubfix(frontend): sanitize AI chat markdown before rendering (#2229)Cursor Agente2519737on GitHubfeat(helm): add Redis secret template supportCursor Agent546810d9on GitHubfeat(ui): Consolidated integrations flow (#2007)Cursor Agent
04Method
What entered the denominator
The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.
Exclusion ledger
| Commits in window | 1,374 |
| Merge commits removed | −0 |
| CI / dependency bots removed | −60 |
| Considered | 1,314 |
Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.
Continue exploring
Related coding-agent evidence
Run the same detector locally.
Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.
npx qmmit-cli TracecatHQ/tracecat