I agree that you can tell if the whole code base is AI written. But stuff like dependency upgrades being handled by an AI is impossible to detect, IMHO.