Pulse
2026-09-18-v3.0
Dataset
2026-10-27-catalog-ai-v2
Ruleset
b2e8889c66f7
Scanned
2026-10-27
Window
February–September 15, 2026
Catalog tracking observation. This repository is measured with the same fixed window and ruleset, but it is not part of the published benchmark or its aggregate claims.

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

pyca/cryptography ↗

pyca/cryptography AI coding statistics: 53.8%

of 359 commits in February–September 15, 2026 were committed by an AI agent — a floor, not an estimate
53.8% agent · top contributor 69.9%6 contributors
team

A small group is using agents. Adoption has spread beyond one person but is not project-wide.

193
agent commits
166
other considered commits
6
agent contributors
69.9%
largest contributor

What shapes this result

Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.

Assisted or autonomous

193assisted
0autonomous

Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached.

Agent share by month

Agent-attributed commit share by month
MonthAgent shareConsidered commits
2026-0246.4%28
2026-0330.6%36
2026-0441%61
2026-0529.7%37
2026-0654.2%59
2026-0777%100
2026-0840%20
2026-0988.9%18

Peak month: 88.9%. Bars are scaled to that peak, not to 100%.

Which agents

AgentVendorCommitsShare
Claude CodeAnthropic19253.5%
GitHub CopilotGitHub10.3%

Inspect the matches

Public commit samples let you inspect the signatures behind the aggregate result.

Matched commit samples

  • 3a4fba41 on GitHubAccept RFC 5958 OneAsymmetricKey (PKCS8 v2) private keys (#15635)Claude Code
  • 643eb8ad on GitHubAdd test vectors for RFC 5958 OneAsymmetricKey (PKCS8 v2) private keys (#1Claude Code
  • cdaac7ba on GitHubUse uv-managed Python for the remaining workflows (#15622)Claude Code
  • 6ed4d3aa on GitHubPromote Windows on ARM (win_arm64) to a fully supported platform (#15350)GitHub Copilot

What entered the denominator

The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.

Exclusion ledger

Commits in window1,204
Merge commits removed−0
CI / dependency bots removed−845
Considered359

Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.

Reproduce this observation

Run the same detector locally.

Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.

npx qmmit-cli pyca/cryptography

Scan another repository