{
  "id": 15588129,
  "title": "Field report: 12656 real pull requests scanned, 9.6% flagged, 46 of our own mistakes fixed in public",
  "url": "https://urgent.news/2026/10/19/field-report-12656-real-pull-requests-scanned-9-6-flagged-46-of-our",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-19T09:38:47.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/mag_solutions_ai/field-report-12656-real-pull-requests-scanned-96-flagged-46-of-our-own-mistakes-fixed-in-public-4412"
  },
  "original_language": "en",
  "account": "In the latest field report, 12,656 public pull requests were analyzed, with 9.6% of them flagged by the security check. A total of 46 mistakes made by the team were fixed publicly. The pull requests were examined against live PyPI and npm dependencies, and 11,266 unique dependencies were identified. No hallucinated package names were confirmed in the 12,656 pull requests, and 21 candidates were discarded during review. Out of the total analyzed, 20 candidates are still pending review, and they are not included in the current count. It is important to note that a \"404\" error indicates a name is not published, not that it was invented by someone. The full report can be found at https://magsolutionsai.com/quality.html.",
  "summary": "We run a security check on public pull requests and publish what it finds — including what it gets wrong. This is the weekly number. What the field looks like this week Pull requests analysed 12656 Pull requests where the check flagged something 9.6% Dependencies resolved against live PyPI and npm 11266 Distinct package names seen 11494 Hallucinated packages confirmed 0 Candidates discarded on…",
  "key_points": [
    "12,656 public pull requests scanned for security issues",
    "9.6% of pull requests flagged, 46 team mistakes fixed publicly",
    "11,266 unique dependencies analyzed, 20 pending review"
  ],
  "editors_take": "Publicly correcting internal errors alongside scanning thousands of pull requests demonstrates a commitment to transparency that builds trust while actively mitigating security risks within the open-source dependency ecosystem.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}