RepoPilot

astral-sh/ruff vs spyglass-search/spyglass

astral-sh/ruff shows stronger signals overall

As of June 2026, ruff shows healthier maintenance signals than spyglass. ruff rates Healthy overall while spyglass rates Mixed. ruff was committed to today with 21+ active contributors, while spyglass last saw a commit 1 year ago with 7+ active contributors. ruff is MIT-licensed while spyglass is AGPL-3.0-licensed. Neither has known critical or high-severity CVEs in its dependency tree.

Informational only. RepoPilot summarises public signals at the time of analysis. Not professional, security, or legal advice.

astral-sh/ruff

Healthy

Healthy across the board

HealthyDependency

Permissive license, no critical CVEs, actively maintained — safe to depend on.

HealthyFork & modify

Has a license, tests, and CI — clean foundation to fork and modify.

HealthyLearn from

Documented and popular — useful reference codebase to read through.

HealthyDeploy as-is

No critical CVEs, sane security posture — runnable as-is.

  • Last commit today
  • 21+ active contributors
  • Distributed ownership (top contributor 35% of recent commits)
  • MIT licensed
  • CI configured
  • Tests present

Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard

spyglass-search/spyglass

Mixed

Slowing — last commit 10mo ago

ConcernsDependency

copyleft license (AGPL-3.0) — review compatibility

HealthyFork & modify

Has a license, tests, and CI — clean foundation to fork and modify.

HealthyLearn from

Documented and popular — useful reference codebase to read through.

HealthyDeploy as-is

No critical CVEs, sane security posture — runnable as-is.

  • Slowing — last commit 10mo ago
  • Concentrated ownership — top contributor handles 51% of recent commits
  • AGPL-3.0 is copyleft — check downstream compatibility
  • Last commit 10mo ago
  • 7 active contributors
  • AGPL-3.0 licensed
  • CI configured
  • Tests present

What would improve this?

  • Use as dependency ConcernsMixed if: relicense under MIT/Apache-2.0 (rare for established libs)

Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests

Signal-by-signal breakdown

ruffspyglass
Stars48,2492,732
Last committoday1y ago
LicenseMITAGPL-3.0
Open issues2,03643
Has tests
Has CI
Test coverage100%2%
Dependency CVEsNo CVEsNo CVEs
Architecture grade
Cycles
Bottom-lineHealthy signalsMixed signals

Want the full analysis? astral-sh/ruff · spyglass-search/spyglass

Ask AI about astral-sh/ruff vs spyglass-search/spyglass

Open the chat with a comparison question pre-filled.