Which has better activity and maintenance signals?

Based on the RepoPilot analysis provided, I can only definitively compare one repository:

cockroachdb/cockroach has the following signals:

• 32,435 stars, 4,101 forks — indicating substantial community interest
• OpenSSF Scorecard: 5.1/10 — a moderate score suggesting some maintenance practices, but with notable gaps
• Weakest areas: CII-Best-Practices (0/10), Security-Policy (0/10), Dangerous-Workflow (0/10)
• Dependency security: 5 npm dependencies scanned with 0 critical/high CVEs
• Verdict: "WAIT — Evidence incomplete — review before adopting"

xiaomi/soar has minimal signals in the data provided:

• The README indicates it's a Go-based SQL optimization tool with CI/CD badges visible
• No detailed RepoPilot analysis, OpenSSF Scorecard, or dependency advisory data was included

Without comparative data for xiaomi/soar, I cannot make a direct maintenance comparison. To assess which has better activity signals, I'd need:

• Star/fork counts for xiaomi/soar
• Recent commit history or release dates for both
• Open issue/PR metrics
• OpenSSF or similar security scorecards for xiaomi/soar

If you're evaluating which to depend on, cockroachdb/cockroach's RepoPilot verdict ("WAIT") suggests caution despite its popularity — review the security-policy and best-practices gaps before adoption.

FOLLOW_UPS:

• What's xiaomi/soar's commit frequency and last release date?
• Does cockroachdb/cockroach address those OpenSSF weaknesses?
• Which repository's use case better fits your needs?