- Dataset
- 2026-10-27-catalog-ai-v2
- Ruleset
- b2e8889c66f7
- Scanned
- 2026-10-27
- Window
- February–September 15, 2026
Find newer versions of package dependencies than what your package.json allows
01Result
raineorshine/npm-check-updates ↗raineorshine/npm-check-updates AI coding statistics: 8.2%
A small group is using agents. Adoption has spread beyond one person but is not project-wide.
02Drivers
What shapes this result
Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.
Assisted or autonomous
Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached.
Agent share by month
| Month | Agent share | Considered commits |
|---|---|---|
| 2026-02 | 0% | 16 |
| 2026-03 | 26.3% | 19 |
| 2026-04 | 21.4% | 28 |
| 2026-05 | 21.4% | 14 |
| 2026-06 | 5.9% | 118 |
| 2026-07 | 3.2% | 62 |
| 2026-08 | 3.5% | 86 |
| 2026-09 | 27.3% | 11 |
Peak month: 27.3%. Bars are scaled to that peak, not to 100%.
Which agents
| Agent | Vendor | Commits | Share |
|---|---|---|---|
| GitHub Copilot | GitHub | 25 | 7.1% |
| Claude Code | Anthropic | 5 | 1.4% |
03Evidence
Inspect the matches
Public commit samples let you inspect the signatures behind the aggregate result.
Matched commit samples
c68fe38eon GitHubRestore `CHANGELOG.md` and automate release-driven changelog sync (#2014)GitHub Copilot4d9f8030on GitHubSelect pnpm global minimumReleaseAge config by installed major version (#1GitHub Copilote4b0c906on GitHubFix 404 for scoped packages when the registry rejects an encoded `@` (#192GitHub Copilot710771e0on GitHubfix: reject a cooldown string that cannot be read (#2083)Claude Code99f51155on GitHubtest: cover coercion of a string format in a nested package's ncurc (#2082Claude Code7aaca58con GitHubfix: use makeTempDir in dep.test.ts (#2081)Claude Code
04Method
What entered the denominator
The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.
Exclusion ledger
| Commits in window | 450 |
| Merge commits removed | −18 |
| CI / dependency bots removed | −78 |
| Considered | 354 |
Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.
Continue exploring
Related coding-agent evidence
Run the same detector locally.
Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.
npx qmmit-cli raineorshine/npm-check-updates