- Dataset
- 2026-10-27-catalog-ai-v2
- Ruleset
- b2e8889c66f7
- Scanned
- 2026-10-27
- Window
- February–September 15, 2026
🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.
01Result
oxsecurity/megalinter ↗oxsecurity/megalinter AI coding statistics: 8.2%
A small group is using agents. Adoption has spread beyond one person but is not project-wide.
02Drivers
What shapes this result
Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.
Assisted or autonomous
Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached.
Agent share by month
| Month | Agent share | Considered commits |
|---|---|---|
| 2026-02 | 2.6% | 38 |
| 2026-03 | 0% | 12 |
| 2026-04 | 40% | 15 |
| 2026-05 | 24% | 50 |
| 2026-06 | 0% | 33 |
| 2026-07 | 0% | 21 |
| 2026-08 | 0% | 65 |
| 2026-09 | 10% | 10 |
Peak month: 40%. Bars are scaled to that peak, not to 100%.
Which agents
| Agent | Vendor | Commits | Share |
|---|---|---|---|
| GitHub Copilot | GitHub | 14 | 5.7% |
| Claude Code | Anthropic | 6 | 2.5% |
03Evidence
Inspect the matches
Public commit samples let you inspect the signatures behind the aggregate result.
Matched commit samples
a49bec0aon GitHubchore(deps): update dependency rumdl to v0.2.2 and fix security vulnerabilGitHub Copilot0417f2c4on GitHubScan only the files modified in a PR with checkov (#7119)GitHub Copilot49167c21on GitHubDeterminism in the installation of the scala linter (#7781)GitHub Copilot1f290620on GitHubAdd lintlang (AI_LINTLANG) to External Plugins Catalog (#8899)Claude Code2d6cbcc3on GitHubfeat: add common_linter_errors property for known non-lint failures and guClaude Code4cd964e8on GitHubfeat: collect and update Docker image download counts, update README badgeClaude Code
04Method
What entered the denominator
The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.
Exclusion ledger
| Commits in window | 1,638 |
| Merge commits removed | −0 |
| CI / dependency bots removed | −1,394 |
| Considered | 244 |
Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.
Continue exploring
Related coding-agent evidence
Run the same detector locally.
Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.
npx qmmit-cli oxsecurity/megalinter