mufeedvh/code2prompt vs ogham/exa
mufeedvh/code2prompt shows stronger signals overall
As of September 2026, code2prompt shows healthier maintenance signals than exa. code2prompt rates Healthy overall while exa rates Mixed. code2prompt last saw a commit 2 months ago with 8+ active contributors, while exa last saw a commit 1 year ago with 27+ active contributors. Both use the MIT license. code2prompt has no known critical CVEs, while exa has 2.
Informational only. RepoPilot summarises public signals at the time of analysis. Not professional, security, or legal advice.
mufeedvh/code2prompt
Strong maintenance signals
No blocking maintenance, license, or known-CVE signals were found; still verify the package version and fit.
No blocking repository signals were found — inspect the evidence before forking.
Documented and popular — useful reference codebase to read through.
Scorecard "Branch-Protection" is 0/10; 1 cyclic import chain detected
- ⚠Scorecard: default branch unprotected (0/10)
- ✓Last commit 2mo ago
- ✓8 active contributors
- ✓Distributed ownership (top contributor 49% of recent commits)
- ✓MIT licensed
- ✓CI configured
- ✓Tests present
What would improve this?
- •Deploy as-is Mixed to Healthy if: bring "Branch-Protection" to ≥3/10 (see scorecard report)
Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against dependency CVEs from deps.dev and OpenSSF Scorecard
ogham/exa
Stale — last commit 2y ago
last commit was 2y ago; 2 high-severity CVEs in dependencies…
No blocking repository signals were found — inspect the evidence before forking.
Documented and popular — useful reference codebase to read through.
2 high-severity CVEs in dependencies; last commit was 2y ago…
- ⚠Stale — last commit 2y ago
- ⚠No tests detected in the complete Git tree
- ⚠Scorecard: marked unmaintained (0/10)
- ⚠Scorecard: default branch unprotected (0/10)
- ⚠2 moderate-severity advisories on direct dependencies
- ⚠2 high-severity advisories in transitive deps
- ✓27+ active contributors
- ✓Distributed ownership (top contributor 41% of recent commits)
- ✓MIT licensed
- ✓CI configured
What would improve this?
- •Use as dependency Mixed to Healthy if: 1 commit in the last 365 days; resolve the high-severity advisories
- •Deploy as-is Concerns to Mixed if: resolve the high-severity advisories
Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against dependency CVEs from deps.dev and OpenSSF Scorecard
Signal-by-signal breakdown
| code2prompt | exa | |
|---|---|---|
| Stars | 7,627 | 24,444 |
| Last commit | 2mo ago | 1y ago |
| License | MIT | MIT |
| Open issues | 21 | 213 |
| Has tests | ✓ | No |
| Has CI | ✓ | ✓ |
| Test coverage | 35% | 0% |
| Dependency CVEs | No CVEs | 0 critical · 2 high · 31 moderate · 0 low |
| Architecture grade | A | C |
| Cycles | 1 | 8 |
| Bottom-line | Healthy signals | Mixed signals |
Want the full analysis? mufeedvh/code2prompt · ogham/exa
Ask AI about mufeedvh/code2prompt vs ogham/exa
Open the chat with a comparison question pre-filled.