Which has better activity and maintenance signals?

Based on the RepoPilot analysis provided, I can only assess pointcloudlibrary/pcl since that's the only repo with computed signals in the data.

pointcloudlibrary/pcl signals:

• OpenSSF Scorecard: 3.2/10 — notably weak, with critical gaps in:

  • Dependency-Update-Tool: 0/10
  • Security-Policy: 0/10
  • SAST: 0/10

• Code scanning (SAST): 0/0 open alerts (no scanning active)

• Dependency security: 0 critical/high CVEs in direct dependencies, but only 0 dependencies scanned total

• Architecture grade: C (50/100) — from import graph analysis (limited data: 2 files parsed, 0 internal imports)

• Community signals: The README and CONTRIBUTING.md show documented processes for bug reports and pull requests, with references to Stack Overflow and Discord for community support, suggesting some maintenance infrastructure is in place.

shadps4-emu/shadps4 has no RepoPilot analysis signals in the data provided — I cannot make a maintenance comparison for that repo.

Verdict: pointcloudlibrary/pcl shows some organizational maturity (contributing guidelines, issue tracking) but weak security practices and automation (no SAST, no dependency tooling). Without shadps4 signals, I cannot determine which has better overall maintenance. To compare both repos fairly, you'd need to check their GitHub activity, commit frequency, and issue response times directly.

FOLLOW_UPS:

• What is shadps4-emu/shadps4's current release cycle?
• Does PCL have published security advisories or policies?
• Which repo has more recent commits on master?