- Dataset
- 2026-10-27-catalog-ai-v2
- Ruleset
- b2e8889c66f7
- Scanned
- 2026-10-27
- Window
- February–September 15, 2026
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
01Result
logto-io/logto ↗logto-io/logto AI coding statistics: 13.8%
Adoption is broad. Many contributors are committing agent-authored work, which is what a real organisational rollout looks like.
02Drivers
What shapes this result
Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.
Assisted or autonomous
Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached.
Agent share by month
| Month | Agent share | Considered commits |
|---|---|---|
| 2026-02 | 2.5% | 81 |
| 2026-03 | 5.3% | 131 |
| 2026-04 | 23.5% | 102 |
| 2026-05 | 26.3% | 114 |
| 2026-06 | 13% | 162 |
| 2026-07 | 10.7% | 140 |
| 2026-08 | 8.8% | 147 |
| 2026-09 | 40.6% | 32 |
Peak month: 40.6%. Bars are scaled to that peak, not to 100%.
Which agents
| Agent | Vendor | Commits | Share |
|---|---|---|---|
| Cursor Agent | Anysphere | 52 | 5.7% |
| Claude Code | Anthropic | 37 | 4.1% |
| GitHub Copilot | GitHub | 36 | 4% |
| Devin | Cognition | 1 | 0.1% |
03Evidence
Inspect the matches
Public commit samples let you inspect the signatures behind the aggregate result.
Matched commit samples
f0d369f3on GitHubfix(core,console): drop stale profile field refs on account center save (#Cursor Agent3b2faa9aon GitHubfeat(core): implement WorkerThreadScriptRunner with a worker pool (#9339)Cursor Agent3a53d468on GitHubrefactor(core): introduce ScriptRunner types and ScriptExecutionError (#93Cursor Agent2781583con GitHubfeat(experience,phrases): add the step-up route tree with method selectionClaude Codeb7170a60on GitHubfeat(schemas,console): add self-hosted license payload guard and OSS defauClaude Code3f9fd153on GitHubfix(core): honor ForceAuthn in SAML application sign-in (#9563)Claude Code8d2dade4on GitHubfix(core): decode credentials from connectionUrl (#9145)GitHub Copilotc4c34e6aon GitHubfeat(core): ga organization.membership.updated delta payload (#8840)GitHub Copilot7e58530don GitHubfix(core): clean stale profile field references (#8769)GitHub Copilotd462a1cfon GitHubfeat(account): add avatar upload field to profile page (#8912)Devin
04Method
What entered the denominator
The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.
Exclusion ledger
| Commits in window | 928 |
| Merge commits removed | −10 |
| CI / dependency bots removed | −9 |
| Considered | 909 |
Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.
Continue exploring
Related coding-agent evidence
Run the same detector locally.
Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.
npx qmmit-cli logto-io/logto