- Dataset
- 2026-10-27-catalog-ai-v2
- Ruleset
- b2e8889c66f7
- Scanned
- 2026-10-27
- Window
- February–September 15, 2026
Web vulnerability scanner written in Python3
01Result
wapiti-scanner/wapiti ↗wapiti-scanner/wapiti AI coding statistics: 74.1%
One person is driving this. The headline number reflects a single contributor's workflow, not a project-wide shift.
02Drivers
What shapes this result
Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.
Assisted or autonomous
Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached.
Agent share by month
| Month | Agent share | Considered commits |
|---|---|---|
| 2026-02 | 71.4% | 35 |
| 2026-05 | 81.3% | 32 |
| 2026-06 | 100% | 1 |
| 2026-07 | 70.7% | 41 |
| 2026-08 | 66.7% | 3 |
Peak month: 100%. Bars are scaled to that peak, not to 100%.
Which agents
| Agent | Vendor | Commits | Share |
|---|---|---|---|
| Claude Code | Anthropic | 58 | 51.8% |
| Cursor Agent | Anysphere | 25 | 22.3% |
03Evidence
Inspect the matches
Public commit samples let you inspect the signatures behind the aggregate result.
Matched commit samples
ce7bb417on GitHubfix(explorer): scope soft-404 detection to non-error, non-PATH_INFO responClaude Code141fd24fon GitHubfix(explorer): detect soft-404 / SPA catch-all pages before persisting theClaude Code3bef6f65on GitHubbump version to 3.3.1, update changelogClaude Code87696c2eon GitHubperf(persister): éviter les deepcopy inutiles lors de la sérialisationCursor Agent50f1fc99on GitHubRegroupement des transactions dans add_payload, save_request et save_requeCursor Agentd1835ffeon GitHubCorrection du triple N+1 dans _get_paths()Cursor Agent
04Method
What entered the denominator
The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.
Exclusion ledger
| Commits in window | 112 |
| Merge commits removed | −0 |
| CI / dependency bots removed | −0 |
| Considered | 112 |
Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.
Continue exploring
Related coding-agent evidence
Run the same detector locally.
Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.
npx qmmit-cli wapiti-scanner/wapiti