Which has better activity and maintenance signals?

Based on the RepoPilot analysis provided:

carguo/gsyvideoplayer shows concerning maintenance signals:

• Verdict: WAIT — Single-maintainer risk — This is the strongest signal. The project depends on a single maintainer.
• OpenSSF Scorecard: 4.4/10 (poor)
• Weakest checks: Dependency-Update-Tool 0/10; Security-Policy 0/10; SAST 0/10
• Architecture grade: C (50/100)
• Code scanning: 0/0 open alerts (no SAST configured)

json-path/jsonpath has no RepoPilot analysis provided in the data, so I cannot make a direct comparative verdict from computed signals.

What I can infer from the source:

• carguo/gsyvideoplayer has recent activity — the README references version 13.1.0 and includes modern features like Jetpack Compose support and dual-channel Maven publishing (GitHub Packages + Maven Central), suggesting ongoing development.
• json-path/jsonpath's changelog shows releases from 2016 (v2.2.0) back to 2011, but no more recent entries are visible in the excerpt provided.

Recommendation: The single-maintainer risk and low OpenSSF scorecard for carguo/gsyvideoplayer warrant caution if adopting it for critical production systems. Without corresponding analysis for json-path/jsonpath, I cannot definitively say which has better maintenance—but the RepoPilot verdict for gsyvideoplayer is a red flag.

FOLLOW_UPS:

• Does carguo/gsyvideoplayer have active GitHub issues and PRs?
• What's the json-path/jsonpath maintenance status in 2024?
• Which project has more recent release dates?