Which has better activity and maintenance signals?

Based on the RepoPilot analysis in the repository data, I can only definitively assess expressjs/express since it has explicit signals included.

expressjs/express shows strong maintenance signals:

• Architecture grade A (99/100) with 0 import cycles — indicating clean, well-maintained code structure [RepoPilot analysis]
• OpenSSF Scorecard 8.9/10 — solid security and maintenance practices [RepoPilot analysis]
• 0 CVEs across 25 dependencies (0 critical/high in direct dependencies) [RepoPilot analysis]
• Recent releases — History.md shows version 4.20.0 released 2024-09-10, with active dependency updates [History.md:L287-L326]
• High test coverage mentioned as a feature in the README [README excerpt]

iamkun/dayjs has no RepoPilot signals provided in the data, so I cannot make a direct comparison. The code excerpts show it has locales (af.js, fr.js) and a well-organized constant system [src/constant.js], but without maintenance metrics (OpenSSF score, dependency CVEs, commit frequency, etc.), I cannot assess its activity level.

Verdict: Based on available signals, expressjs/express demonstrates healthy, active maintenance. For dayjs, you'd need to check its GitHub repo directly for activity metrics.

FOLLOW_UPS:

• What's the latest dayjs release date and version?
• Does express have any known security vulnerabilities?
• How many open issues does each project have?