- Dataset
- 2026-10-27-catalog-ai-v2
- Ruleset
- b2e8889c66f7
- Scanned
- 2026-10-27
- Window
- February–September 15, 2026
Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps
01Result
authgear/authgear-server ↗authgear/authgear-server AI coding statistics: 29.9%
A small group is using agents. Adoption has spread beyond one person but is not project-wide.
02Drivers
What shapes this result
Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.
Assisted or autonomous
Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached.
Agent share by month
| Month | Agent share | Considered commits |
|---|---|---|
| 2026-02 | 0% | 63 |
| 2026-03 | 22.7% | 255 |
| 2026-04 | 22% | 254 |
| 2026-05 | 44.6% | 177 |
| 2026-06 | 61.3% | 150 |
| 2026-07 | 49% | 341 |
| 2026-08 | 17.8% | 354 |
| 2026-09 | 12.9% | 224 |
Peak month: 61.3%. Bars are scaled to that peak, not to 100%.
Which agents
| Agent | Vendor | Commits | Share |
|---|---|---|---|
| Claude Code | Anthropic | 414 | 22.8% |
| Cursor Agent | Anysphere | 130 | 7.2% |
03Evidence
Inspect the matches
Public commit samples let you inspect the signatures behind the aggregate result.
Matched commit samples
c1f05ae7on GitHubAdd e2e coverage for the SMS gateway address policyClaude Codeebaad460on GitHubFix the custom SMS provider's SSRF log naming a config key that does not eClaude Code710053abon GitHubchore: fix npm dependency vulnerabilities in scripts/npmClaude Code2f003b69on GitHub[Portal] Add ApplicationTypeRadioCards and OAuthClientList componentsCursor Agent14ff4cacon GitHub[Portal] Submit GTM dialog on Enter in integrations screenCursor Agent1893d636on GitHub[Portal] Fix audit log table header and row separatorsCursor Agent
04Method
What entered the denominator
The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.
Exclusion ledger
| Commits in window | 2,143 |
| Merge commits removed | −295 |
| CI / dependency bots removed | −30 |
| Considered | 1,818 |
Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.
Continue exploring
Related coding-agent evidence
Run the same detector locally.
Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.
npx qmmit-cli authgear/authgear-server