Which has better activity and maintenance signals?

Based on the RepoPilot analysis signals provided:

p0deje/maccy shows stronger activity indicators:

• 21,493 stars and 1,138 forks — significantly higher community engagement
• Active development — the codebase includes recent patterns like async/await Tasks, SwiftUI with modern Observable patterns, and Sparkle updater integration
• Continuous updates — reflected in the README's macOS Sonoma 14+ requirement, indicating ongoing version-aware maintenance

theboredteam/boring.notch signals:

• No publicly available star/fork counts in the provided data
• Explicit branch management — the CONTRIBUTING.md [lines 28-36] mandates the dev branch for code and main for docs, suggesting structured release practices
• Community infrastructure — includes a Discord server [lines 122-134], indicating active community engagement

However, there are maintenance concerns:

Both repos show weak OpenSSF Scorecard signals in maccy's case (2.8/10), with notably failing checks:

• CI-Tests: 0/10
• Dependency-Update-Tool: 0/10
• Security-Policy: 0/10

For maccy specifically, the architecture grade is C (50/100) with 0 files parsed—this is a concerning signal about code analysis coverage, though it may reflect Swift-specific tooling limitations rather than actual code quality.

maccy is clearly more active by download/community metrics, but neither repo shows strong formal maintenance signals (CI, security policies, automated dependency updates) based on available data.

FOLLOW_UPS:

• What's maccy's release cadence and latest version date?
• Does boring.notch have automated CI/CD pipeline details?
• Are there any security advisories filed against either?