Review economics
OWASP/CheatSheetSeries
Read from the 100 most recently merged pull requests ·
Pull requests with attributed agent authorship took only 1.0× the reviews submitted of the rest.
≥3%
Attributed
a floor
3
Attributed PRs
97
Other PRs
100
Read
Attributed — the latest 3
#2286 Authentication: clarify why longer passphrases resist dictionary attacks
1 reviews · 0h to merge
#2265 Add AI contributor guardrails (AGENTS.md) and maintainer PR-review tooling
1 reviews · 20h to merge
#2103 Security: No Timeout on HTTP Requests Leading to Potential Denial of Service
3 reviews · 73.7d to merge
The rest — the latest 5
#2338 Enforce US English terminology in textlint
1 reviews · 14h to merge
#2335 Normalize remaining US English spellings final sweep (part 4)
1 reviews · 4h to merge
#2334 Normalize US English in three security cheat sheets (part 3)
1 reviews · 10h to merge
#2333 Normalize US English in three web security cheat sheets (part 2)
1 reviews · 10h to merge
#2316 Normalize US English in three cheat sheets (part 1)
1 reviews · 3.6d to merge
How this was measured
3% of merged commits carry agent attribution — a floor, not the share; tools that only complete code inline leave no commit trail, so the unattributed side includes AI-assisted work; 1 PR came off an agent branch with no commit attribution, so the real share runs higher; reads 100 of 1351 merged PRs — the rest have not been analyzed yet.
Detected: Claude Code, GitHub Copilot coding agent, OpenAI Codex.
“Attributed” means a commit carried an agent’s signature — a co-author trailer, an agent commit identity, or an agent bot account. Tools that only complete code inline leave no such mark, so the other column is “rest”, not “human-written”. Full method and its limits
The badge reads this repo’s current report, so it follows the number.
Tell me when this moves
We re-read OWASP/CheatSheetSeries weekly and email only when the number changes materially.
Read your own repos
This one is public. For a private repo, run the same read locally through your own GitHub credentials — nothing is installed and nothing is sent to us.
npx @ambera/review-taxWant this continuously on OWASP/CheatSheetSeries — each pull request paired to the task it came from, and the work graded from its review loop rather than its diff size? Claim this repo in Forge
Browse every repo people have read · Read a different repository