Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH017

At the snapshots LH008 to LH010 timed, does some job in a pinned project's CI workflows install the library's version from the file that held the pin or lock, and in particular from the lockfile, including where the project's own container recipe leaves that file unread?

The answer so far. P1. 395 of the 469 pairs, 84.2 per cent (95 per cent interval 79.7 to 88.3), keep at least one GitHub Actions or GitLab CI job at the snapshot: as a rule, by the brief's convention (derived measurement). In the repository view the share is 81.5 per cent (77.3 to 85.5), the same label; 271 of the 332 repositories keep CI at one of their snapshots and 270 at every one. 5 more pairs keep only another CI system's files (counted, not classed), and 69 keep none.

Study, version 0.3, 30 September 2026 studies/LH017/LH017.md

From studies/LH017/ in the repository, last changed 9 November 2026.