Software's town square now comes with a workshop.

Picture the maintainer of a small open-source library at the end of a long day. A bug report has arrived from someone she has never met, on another continent. She reads it, assigns the issue to Copilot and closes her laptop. Before she has finished dinner, the work is waiting for her: a branch with the fix, a tidy diff to review and a short note explaining what changed and why. Her name sits on the commits as co-author. She asks for one tweak, the agent makes it, and she opens the pull request, watches the automated tests turn green and merges.

Every step of that small story happens on GitHub. Since 2008 the service has grown from a place to store code into the place where much of the world's software is written, reviewed, tested, secured and shipped. It now counts more than 225 million developers, more than 4 million organizations and more than 800 million repositories, and 90 percent of the Fortune 100 build there.

A repository is more than a folder.#

At GitHub's core is Git, a tool that records every change to a set of files, so nothing is ever truly lost and anyone can see who changed what, and when. A repository holds a project's code along with its entire history. The pull request is the social layer on top: a proposal to merge your changes, with a conversation attached. Reviewers comment on individual lines, automated checks report in, and the change lands only when the project is satisfied.

The scale of that conversation is hard to picture. In the twelve months GitHub measured for its 2025 Octoverse report, developers merged a record 518.7 million pull requests, and on average more than one new developer joined every second. The same report recorded TypeScript overtaking both Python and JavaScript in August 2025 as the language with the most monthly contributors on the platform.

Around the code sit the tools for running a project. Issues track bugs and ideas. Projects turns them into tables, boards and roadmaps. Discussions gives a community a forum of its own, so questions and announcements do not crowd the bug tracker.

Automation that runs on every push#

GitHub Actions, generally available since November 2019, turns a repository into a programmable factory. A workflow is a short configuration file that says, in effect, when this happens, do that: run the tests when someone opens a pull request, publish a release when a version is tagged, deploy a website when the main branch changes. GitHub supplies the runners, the machines that do the work, on Linux, Windows and macOS, with Arm and GPU options for heavier jobs. Matrix workflows test across many operating systems and language versions at once.

A complete workflow can be this small:

on: pull_request
jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - run: npm test

Actions is free for public repositories on standard GitHub-hosted runners, and private repositories on the Free plan include 2,000 minutes a month. Ready-made actions shared through GitHub Marketplace mean many steps are a single line borrowed from someone else.

The same repository can publish what it builds. GitHub Packages hosts container images along with npm, RubyGems, Maven, Gradle and NuGet packages, publicly or privately. GitHub Pages turns HTML, CSS and JavaScript into a hosted website at an address like username.github.io, a natural home for project documentation and personal portfolios.

A development machine for every contributor#

Anyone who has lost a day to setting up a laptop for a new project will appreciate Codespaces. A codespace is a development environment hosted in the cloud, a Linux container on a virtual machine that opens in a web browser, in Visual Studio Code or from the GitHub command line. A project can commit a dev container configuration that defines its runtimes and tools, so every contributor starts from the same setup. Personal accounts include a monthly quota of free use.

From autocomplete to a team of agents#

GitHub Copilot arrived as a technical preview in June 2021, an AI assistant that suggested whole lines and functions as you typed, and it became generally available a year later. Five years on, it works less like a suggestion box and more like a team.

In the editor, agent mode lets Copilot make edits across a project's files. On GitHub itself, Copilot cloud agent takes an assigned task, researches the repository, writes a plan and makes the changes on a branch inside a temporary environment, ready for a person to review. The guardrails are careful: its commits are signed and attributed to Copilot with the person who started the task as co-author, its environment runs behind a firewall by default, and it cannot push directly to the default branch.

Copilot code review reads pull requests and leaves comments, even on changes from contributors who do not have a Copilot license. Copilot CLI brings the assistant into the terminal. The GitHub Copilot app, generally available since June 2026 on macOS, Windows and Linux, is a desktop command center for agent work. Each session gets its own isolated working copy of the code, and Agent Merge can watch the test runs, address failing checks and wait for required reviewers before a change lands. Developers can also assign tasks to agents from other AI companies, including Anthropic's Claude and OpenAI's Codex, right alongside Copilot.

There is a free Copilot plan, which includes Copilot CLI, and through GitHub Education students get Copilot Student and Codespaces at no cost. GitHub says the program has reached 5 million students.

Security that starts before the leak#

A single API key pasted into a public repository is an open door. Push protection scans code as it is pushed and blocks the push if it spots a credential such as an API key or password, and it is on by default for public repositories. Dependabot watches the open-source libraries a project depends on, raises an alert when one has a known vulnerability and opens pull requests to update it, on every plan.

Code scanning uses CodeQL, GitHub's analysis engine, which treats code as data you can query, to find vulnerable patterns. Copilot Autofix then explains what it found and suggests a fix. Both are available free for public repositories. Security advisories let maintainers discuss and fix a vulnerability privately before announcing it. For private code, teams can add GitHub Secret Protection and GitHub Code Security, the paid products in the GitHub Advanced Security family.

Open source, funded and preserved.#

Open source is software whose code anyone can read, use and improve, and much of it lives on GitHub. The service made a set of habits routine: forking a project to experiment, sending changes back, thanking a stranger in a review thread. Today they are simply part of how open source works.

GitHub Sponsors lets people and companies pay the developers and projects they depend on. It has given back more than $40 million to maintainers, supports sponsorships in 103 regions, and more than 4,200 organizations sponsor through it.

GitHub has even planned for the very long term. On February 2, 2020, it captured a snapshot of every active public repository, 21 terabytes of code, and wrote it to 186 reels of archival film. The reels rest in the Arctic World Archive in Svalbard, Norway, about 250 meters down a decommissioned coal mine in the permafrost, in storage designed to last a thousand years.

Why the breadth matters#

Each of these tools would be useful alone. Together they form something close to a complete software company in a browser tab: a place to plan, write, review, test, secure, package, publish and fund the work, with agents ready to take on the routine parts. That breadth gives a student, a weekend project or a startup of a few people the same tools the largest engineering organizations use, and the reach to match.

To explore: GitHub Actions, GitHub Copilot, GitHub Advanced Security, GitHub Sponsors and GitHub Education.