26.35% of repositories require no code review before merging.

May 27, 2026

26.35% of repositories require no code review before merging. — This cybersecurity statistic was published by Orca Security in May 2026. It covers topics including Code Review, Repositories. The original data appears in 2026 State of Application Security Report . For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 4/7/2026

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

26.35% of repositories require no code review before merging. This data was published by Orca Security and covers Code Review, Repositories.

Where does this data come from?

This statistic comes from 2026 State of Application Security Report , published by Orca Security on May 27, 2026. You can view the original report at https://orca.security/lp/2026-state-of-application-security-report/.

What cybersecurity topics does this cover?

This statistic relates to Code Review, Repositories. Browse more statistics on Code Review or from Orca Security.

CYBERSTATS

26.35% of repositories require no code review before merging.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

38% of organizations still rely primarily on manual review for AI-generated code.

Application of custom rules to automated code review tools to catch issues unique to AI-generated code increased by 10%.

AI-generated pull requests wait 4.6 times longer for review than human-written pull requests.

24.82% of repositories predate GitHub’s 2023 default token hardening and may retain legacy access settings.

30.60% of repositories do not require signed commits.

More than 81% of organizations deploy vulnerable dependencies.

Browse by Topic

Stay Ahead of Cyber Threats