Which has better activity and maintenance signals?

Question

RepoPilot · Accepted Answer

Based on RepoPilot's computed signals, **pqpo/smartcropper has better maintenance and activity indicators**, though both repos show mixed signals:

## pqpo/smartcropper
- **Stars & engagement**: 4,132 stars, 759 forks — solid community adoption
- **Architecture grade**: C (50/100) — indicates moderate code organization
- **Dependency security**: Clean — 0 critical/high CVEs in direct dependencies
- **Weakness**: OpenSSF Scorecard only 1.4/10, with critical gaps in CI-Tests (0/10), Dependency-Update-Tool (0/10), and Security-Policy (0/10)

## yunaiv/yudao-cloud
- **Scope**: Larger enterprise platform (complete version includes systems for commerce, CRM, ERP, WMS, MES, IM, AI, IoT)
- **Framework maturity**: Well-documented tech stack (Spring Cloud Alibaba 2021.0.6.2, Nacos 2.2.0, RocketMQ 5.2.0, etc.)
- **Multiple versions**: Maintains parallel branches for JDK 8+Spring Boot 2.7, JDK 17/21+Spring Boot 3.5, and JDK 25+Spring Boot 4.x

**Activity verdict**: smartcropper shows cleaner dependency posture but weaker CI/security practices. yudao-cloud demonstrates active maintenance through multi-version support, though RepoPilot signals aren't provided for comparison. For **image processing**, smartcropper is purpose-built; for **enterprise platforms**, yudao-cloud is actively evolved.

FOLLOW_UPS:
- How does smartcropper's native code performance scale with image size?
- What are yudao-cloud's deployment complexity requirements?
- Does smartcropper support custom ML model loading?