Which has better activity and maintenance signals?

I need to compare the maintenance and activity signals for both repositories based on the RepoPilot analysis and README content.

realm/realm-java:

• The RepoPilot verdict is "GO — Healthy across all four use cases", indicating strong health signals

• However, the README contains a [WARNING] about SDK deprecation announced in September 2024:

  "We announced the deprecation of Atlas Device Sync + Realm SDKs in September 2024."

  This is followed by links to deprecation documentation, signaling that the project is in maintenance/sunsetting mode rather than active development.

yuliskov/smarttube:

• No formal RepoPilot analysis signals are provided in the repository data
• The README does include a security disclosure [yuliskov/smarttube README.md:L1-L19] about past malware infections in the development environment, with recovery steps documented
• The project appears to be actively maintained with security scanning and restoration procedures in place, but the disclosure suggests caution

Conclusion:

realm/realm-java has better formal health signals (the "GO" verdict), but yuliskov/smarttube appears more actively maintained in practice—the security incident disclosure and recovery process suggest ongoing development and responsibility. However, realm-java is officially deprecated, making it unsuitable for new projects despite good code quality.

For long-term reliability, neither is ideal: realm-java is sunsetting (though code quality is solid), and smarttube is a single-developer hobby project with a documented security incident.

FOLLOW_UPS:

• What specific features does realm-kotlin offer as the recommended replacement?
• Is smarttube's build process documented for security verification?
• How recent is realm-java's last stable release before deprecation?