Which has better activity and maintenance signals?

Based on the RepoPilot analysis provided:

carguo/gsyvideoplayer shows stronger maintenance signals:

1. Recent activity: The README excerpt references v13.1.0 as current, with v13.0.0 changelog dated 2026-05-07 mentioning recent features like adaptive bitrate for HLS/DASH, WebVTT subtitle support, and infrastructure improvements (cache lifecycle, error handling, SurfaceView fixes) [README_CN.md:L510-L519].

2. Active CI/CD: The Compose module documentation mentions JDK 21 verification in CI workflows and JDK 17 local validation [README.md:L63], indicating maintained build infrastructure.

3. Dual-channel publishing: Recent migration to Maven Central with fallback GitHub Packages setup shows ongoing dependency management work [MAVEN_CENTRAL_AUTOMATION.md:L14-L26].

4. Significant community: 21,486 stars and 4,315 forks reflect active interest.

However, RepoPilot flags a critical risk: Single-maintainer dependency with WAIT verdict — architecture grade C (50/100), OpenSSF Scorecard 4.4/10, and zero on Security-Policy and SAST checks. No dependency security scanning data is available.

hongyangandroid/okhttputils: Repository data shows functional code (cookie persistence, request/response handling) but no comparable maintenance signals—no version changelog, activity timestamp, or CI configuration visible in the provided excerpts.

Conclusion: gsyvideoplayer shows more visible activity, but adopt with caution given maintainer concentration and security tooling gaps.

FOLLOW_UPS:

• What security advisories exist for gsyvideoplayer dependencies?
• Does okhttputils have published release notes or version history?
• How frequently does gsyvideoplayer merge pull requests?