RepoPilot

dotnet/maui vs lykosai/stabilitymatrix

dotnet/maui shows stronger signals overall

As of September 2026, maui shows healthier maintenance signals than stabilitymatrix. maui rates Healthy overall while stabilitymatrix rates Mixed. maui was committed to 1 week ago with 21+ active contributors, while stabilitymatrix was committed to 2 weeks ago with 6+ active contributors. maui is MIT-licensed while stabilitymatrix is AGPL-3.0-licensed. Neither has known critical or high-severity CVEs in its dependency tree.

Informational only. RepoPilot summarises public signals at the time of analysis. Not professional, security, or legal advice.

dotnet/maui

Healthy

Strong maintenance signals

MixedDependency

dependency CVE scan unavailable

HealthyFork & modify

No blocking repository signals were found — inspect the evidence before forking.

HealthyLearn from

Documented and popular — useful reference codebase to read through.

MixedDeploy as-is

Scorecard "Token-Permissions" is 0/10; dependency CVE scan unavailable

  • Scorecard: dangerous CI workflow (0/10)
  • Last commit today
  • 21+ active contributors
  • Distributed ownership (top contributor 31% of recent commits)
  • MIT licensed
  • CI configured
  • Tests present

Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard

lykosai/stabilitymatrix

Mixed

Mixed signals — read the receipts

ConcernsDependency

copyleft license (AGPL-3.0) — review compatibility; no tests detected in the complete Git tree…

HealthyFork & modify

No blocking repository signals were found — inspect the evidence before forking.

HealthyLearn from

Documented and popular — useful reference codebase to read through.

MixedDeploy as-is

Scorecard "Branch-Protection" is 0/10; dependency CVE scan unavailable

  • Concentrated ownership — top contributor handles 79% of recent commits
  • AGPL-3.0 is copyleft — check downstream compatibility
  • No tests detected in the complete Git tree
  • Scorecard: default branch unprotected (0/10)
  • Last commit 2d ago
  • 6 active contributors
  • AGPL-3.0 licensed
  • CI configured

What would improve this?

  • Use as dependency Concerns to Mixed if: relicense under MIT/Apache-2.0 (rare for established libs)

Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard

Signal-by-signal breakdown

mauistabilitymatrix
Stars23,3218,727
Last commit8d ago15d ago
LicenseMITAGPL-3.0
Open issues3,883161
Has testsNo
Has CI
Test coverage100%0%
Dependency CVEsNo CVEsNo CVEs
Architecture gradeCA
Cycles00
Bottom-lineHealthy signalsMixed signals

Want the full analysis? dotnet/maui · lykosai/stabilitymatrix

Ask AI about dotnet/maui vs lykosai/stabilitymatrix

Open the chat with a comparison question pre-filled.