astral-sh/ruff vs kamiyaa/joshuto
astral-sh/ruff shows stronger signals overall
As of June 2026, ruff shows healthier maintenance signals than joshuto. ruff rates Healthy overall while joshuto rates Mixed. ruff was committed to today with 21+ active contributors, while joshuto last saw a commit 2 months ago with 20+ active contributors. ruff is MIT-licensed while joshuto is LGPL-3.0-licensed. Neither has known critical or high-severity CVEs in its dependency tree.
Informational only. RepoPilot summarises public signals at the time of analysis. Not professional, security, or legal advice.
astral-sh/ruff →
Healthy across the board
Permissive license, no critical CVEs, actively maintained — safe to depend on.
Has a license, tests, and CI — clean foundation to fork and modify.
Documented and popular — useful reference codebase to read through.
No critical CVEs, sane security posture — runnable as-is.
- ✓Last commit today
- ✓21+ active contributors
- ✓Distributed ownership (top contributor 35% of recent commits)
- ✓MIT licensed
- ✓CI configured
- ✓Tests present
Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard
kamiyaa/joshuto →
Mixed signals — read the receipts
copyleft license (LGPL-3.0) — review compatibility; no tests detected
Has a license, tests, and CI — clean foundation to fork and modify.
Documented and popular — useful reference codebase to read through.
No critical CVEs, sane security posture — runnable as-is.
- ⚠Concentrated ownership — top contributor handles 63% of recent commits
- ⚠LGPL-3.0 is copyleft — check downstream compatibility
- ⚠No test directory detected
- ✓Last commit 3w ago
- ✓20 active contributors
- ✓LGPL-3.0 licensed
- ✓CI configured
What would improve this?
- →Use as dependency Concerns → Mixed if: relicense under MIT/Apache-2.0 (rare for established libs)
Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests
Signal-by-signal breakdown
| ruff | joshuto | |
|---|---|---|
| Stars | 48,249 | 3,698 |
| Last commit | today | 2mo ago |
| License | MIT | LGPL-3.0 |
| Open issues | 2,036 | 105 |
| Has tests | ✓ | — |
| Has CI | ✓ | ✓ |
| Test coverage | 100% | 0% |
| Dependency CVEs | No CVEs | No CVEs |
| Architecture grade | — | — |
| Cycles | — | — |
| Bottom-line | Healthy signals | Mixed signals |
Want the full analysis? astral-sh/ruff · kamiyaa/joshuto
Ask AI about astral-sh/ruff vs kamiyaa/joshuto
Open the chat with a comparison question pre-filled.