RepoPilot

conductor-oss/conductor vs tencent/shadow

conductor-oss/conductor shows stronger signals overall

As of September 2026, conductor shows healthier maintenance signals than shadow. conductor rates Healthy overall while shadow rates Mixed. conductor was committed to 1 week ago with 20+ active contributors, while shadow last saw a commit 5 months ago with 11+ active contributors. conductor is Apache-2.0-licensed while shadow is BSD-3-Clause-licensed. Neither has known critical or high-severity CVEs in its dependency tree.

Informational only. RepoPilot summarises public signals at the time of analysis. Not professional, security, or legal advice.

conductor-oss/conductor

Healthy

Strong maintenance signals

MixedDependency

dependency CVE scan unavailable

HealthyFork & modify

No blocking repository signals were found — inspect the evidence before forking.

HealthyLearn from

Documented and popular — useful reference codebase to read through.

MixedDeploy as-is

Scorecard "Branch-Protection" is 0/10; dependency CVE scan unavailable

  • Scorecard: default branch unprotected (0/10)
  • Last commit today
  • 20 active contributors
  • Distributed ownership (top contributor 19% of recent commits)
  • Apache-2.0 licensed
  • CI configured
  • Tests present

Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard

tencent/shadow

Mixed

Slowing — last commit 5mo ago

MixedDependency

dependency CVE scan unavailable

HealthyFork & modify

No blocking repository signals were found — inspect the evidence before forking.

HealthyLearn from

Documented and popular — useful reference codebase to read through.

MixedDeploy as-is

Scorecard "Branch-Protection" is 0/10; dependency CVE scan unavailable

  • Slowing — last commit 5mo ago
  • Single-maintainer risk — top contributor 83% of recent commits
  • Scorecard: default branch unprotected (0/10)
  • Last commit 5mo ago
  • 11 active contributors
  • BSD-3-Clause licensed
  • CI configured
  • Tests present

Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard

Signal-by-signal breakdown

conductorshadow
Stars32,1857,786
Last commit9d ago5mo ago
LicenseApache-2.0BSD-3-Clause
Open issues25869
Has tests
Has CI
Test coverage42%100%
Dependency CVEsNo CVEsNo CVEs
Architecture gradeCC
Cycles00
Bottom-lineHealthy signalsMixed signals

Want the full analysis? conductor-oss/conductor · tencent/shadow

Ask AI about conductor-oss/conductor vs tencent/shadow

Open the chat with a comparison question pre-filled.