Dataset: 2026-10-27-catalog-ai-v2
Ruleset: b2e8889c66f7
Scanned: 2026-10-27
Window: February–September 15, 2026

Catalog tracking observation. This repository is measured with the same fixed window and ruleset, but it is not part of the published benchmark or its aggregate claims.

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

01Result

vimeo/psalm ↗

vimeo/psalm AI coding statistics: 24.4%

of 307 commits in February–September 15, 2026 were committed by an AI agent — a floor, not an estimate

24.4% agent · top contributor 89.3%5 contributors

individual

One person is driving this. The headline number reflects a single contributor's workflow, not a project-wide shift.

agent commits

232

other considered commits

agent contributors

89.3%

largest contributor

02Drivers

What shapes this result

Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.

Assisted or autonomous

73assisted

2autonomous

Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached.

Agent share by month

Peak month: 67.3%. Bars are scaled to that peak, not to 100%.

Which agents

Agent	Vendor	Commits	Share
Claude Code	Anthropic	71	23.1%
GitHub Copilot	GitHub	3	1%
Cursor Agent	Anysphere	1	0.3%

03Evidence

Inspect the matches

Public commit samples let you inspect the signatures behind the aggregate result.

Matched commit samples

09341b66 on GitHubCheck out branch-specific baselines for test-with-real-projectsClaude Code
5df32a91 on GitHubFix taint graph resolution progress bar overshooting 100%Claude Code
7a2d7840 on GitHubRe-dispatch taint from all callables in an ambiguous unionClaude Code
1f850f4e on GitHubUpdate src/Psalm/Internal/Codebase/CodeUseGraph.phpGitHub Copilot
719f0862 on GitHubApply PR #11725 changes and fix missing ArgumentAnalyzer.php updateGitHub Copilot
4cc82819 on GitHubInitial planGitHub Copilot
6d2d73f8 on GitHubfix: pin GitHub Actions to SHA for supply chain security (#11863)Cursor Agent

04Method

What entered the denominator

The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.

Exclusion ledger

Commits in window	411
Merge commits removed	−100
CI / dependency bots removed	−4
Considered	307

Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.

Continue exploring

Claude Code commitsBrowse repositories with detected Claude Code signatures →GitHub Copilot commitsBrowse repositories with detected GitHub Copilot signatures →Cursor Agent commitsBrowse repositories with detected Cursor Agent signatures →PHP AI coding statisticsCompare evidence across PHP repositories →GitHub AI commit analyzerInspect another repository with the same evidence model →

Reproduce this observation

Run the same detector locally.

Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.

npx qmmit-cli vimeo/psalm

Scan another repository

Try

Month	Agent share	Considered commits
2026-02	0%	34
2026-03	3.3%	92
2026-04	2%	51
2026-05	6.7%	15
2026-06	33.3%	12
2026-07	0%	1
2026-08	0%	4
2026-09	67.3%	98