Pulse
2026-09-18-v3.0
Dataset
2026-09-18-v3.0
Ruleset
b2e8889c66f7
Scanned
2026-09-16
Window
February–September 15, 2026
Local to this browser

01Result

projectdiscovery/nuclei ↗

projectdiscovery/nuclei AI coding statistics: 1.9%

of 268 commits in February–September 15, 2026 were committed by an AI agent — a floor, not an estimate
1.9% agent · top contributor 40%4 contributors
team

A small group is using agents. Adoption has spread beyond one person but is not project-wide.

5
agent commits
263
other considered commits
4
agent contributors
40%
largest contributor

02Drivers

What shapes this result

Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.

Assisted or autonomous

5assisted
0autonomous

Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached. Across the whole index, 96% of agent commits are assisted.

Agent share by month

Agent-attributed commit share by month
MonthAgent shareConsidered commits
2026-025.3%19
2026-033.6%55
2026-040%22
2026-055.4%37
2026-060%30
2026-070%49
2026-080%19
2026-090%37

Peak month: 5.4%. Bars are scaled to that peak, not to 100%.

Which agents

AgentVendorCommitsShare
Claude CodeAnthropic51.9%

03Evidence

Inspect the matches

Public commit samples let you inspect the signatures behind the aggregate result.

Matched commit samples

  • 79105261 on GitHubtest(telnetmini): address CodeRabbit review — add 48-byte boundary test anClaude Code
  • 1aff8674 on GitHubfix(telnetmini): replace len<12 guard with len<48 to prevent slice-bounds Claude Code
  • 67e88069 on GitHubfix(fuzz): prevent path mutation across sequential Rebuild calls (#6398) (Claude Code

04Method

What entered the denominator

The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.

Exclusion ledger

Commits in window436
Merge commits removed−98
CI / dependency bots removed−70
Considered268

Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.

05Provenance

Pinned to a source state

This observation names the repository state, release, and detector that produced it. Use these identifiers when reproducing or citing the result.

Dataset release
2026-09-18-v3.0
Scan date
2026-09-16
Ruleset
sha256:b2e8889c66f72c18a61839f0bf1a9f77b5481ba2def044dba33c797b2f2bdcae
Canonical repository
projectdiscovery/nuclei
Default branch
dev
Resolved HEAD
66068dbec224bbc0def1dea99003fc33d5816b7f ↗
Resolved
2026-09-16
Measurement window
February–September 15, 2026
Download observation JSONDeterministic export · same values as this page

06Peer context

Position among comparable repositories

The cohort uses the same release and measurement window, then narrows to the repository’s ecosystem and removes low-activity observations.

CohortGo · 132 eligible repositories · at least 100 considered commits2026-09-18-v3.0 · February–September 15, 2026 · 62 of 194 ecosystem repositories excluded
Agent-commit share position44th percentile

Midrank percentile; equal shares split the tied positions.

Repository
1.9%
Cohort median
2.8%
Share rank
72 / 132
0th50th100th

Percentile = (repositories below + half of 6 tied repositories) ÷ 132.

Continue exploring

Claude Code commitsBrowse repositories with detected Claude Code signatures →GitHub AI commit analyzerInspect another repository with the same evidence model →
Reproduce this observation

Run the same detector locally.

Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.

npx qmmit-cli projectdiscovery/nuclei

Scan another repository

Try