Which has better activity and maintenance signals?

Based on the RepoPilot analysis provided:

kerryjiang/supersocket shows stronger maintenance signals:

• Architecture grade A (100/100) with clean structure: 13 files parsed, 11 internal imports, 0 import cycles
• Dependency security: 0 critical/high/moderate CVEs across 75 dependencies scanned, including 0 in direct dependencies
• Code scanning: 0 open alerts (SAST)
• License compliance: 0 dependency license conflicts (of 25 checked)
• Active GitHub presence: 4232 stars, 1165 forks
• Build workflow badge shown in README, indicating CI/CD in place

pardeike/harmony shows weaker maintenance signals on the metrics provided:

• OpenSSF Scorecard: 3.5/10 (kerryjiang/supersocket was not scored, so no direct comparison)
• Notable gaps in the Scorecard: Dependency-Update-Tool 0/10; Security-Policy 0/10; SAST 0/10
• The compatibility test suite [HarmonyTests.Compatibility] is extensive but appears focused on regression testing rather than new feature velocity

Activity indicator: supersocket's README explicitly mentions recent features like HTTP Keep-Alive, Server-Sent Events (SSE), and MCP support [src/SuperSocket.Http/README.md], suggesting active development. harmony's compatibility suite suggests defensive, stability-focused maintenance rather than feature expansion.

Verdict: kerryjiang/supersocket demonstrates healthier maintenance signals across security, code quality, and architecture.

FOLLOW_UPS:

• What are supersocket's recent commit frequencies?
• Does harmony have published security advisories?
• How do test coverage metrics compare?