Which has better activity and maintenance signals?

Based on the RepoPilot analysis data provided:

expressjs/express shows strong maintenance signals:

• Architecture grade: A (99/100) — no import cycles, well-structured codebase with 141 files parsed
• Dependency security: 0 critical, 0 high, 0 moderate CVEs across 25 dependencies
• OpenSSF Scorecard: 8.9/10 — robust security posture
• Code scanning: 0 open alerts via SAST
• Most-depended-on files identified, indicating stable, well-maintained core modules [lib/utils.js, lib/express.js, test/support/utils.js]
• Dependabot configured with monthly npm update intervals [.github/dependabot.yml:L1-L17]
• Recent activity: History.md shows ongoing improvements including conditional revalidation for QUERY requests, HTML structure enhancements in redirects, and dependency upgrades to content-type ^2.0.0 and content-disposition ^2.0.0 [History.md:L10-L46]
• High stars (69,268) and forks (24,412) indicate active community engagement

fastify/fastify data in the block is more limited (partial code excerpts only), without comparable RepoPilot verdicts or architecture grading. However, it shows:

• Dependabot configured with weekly npm update intervals and semantic versioning strategy [.github/dependabot.yml:L1-L40]
• Project governance documented in PROJECT_CHARTER.md

Verdict: expressjs/express has better documented activity and maintenance signals in this dataset — the RepoPilot analysis explicitly marks it "GO — Healthy across all four use cases" with quantified scores, while fastify/fastify data here is limited to code excerpts without comparable health metrics.

FOLLOW_UPS:

• How does Express handle trust proxy configuration?
• What are Express's key request properties?
• What template engines does Express support?