NationalSecurityAgency/ghidra

Prefer upstream unless you specifically need this tiny typo fix on top of an old snapshot. This fork adds almost no new capability and is far too stale for most adopters.

Choose this fork if you want Ghidra with targeted workflow and UI ergonomics changes, especially around keybindings, detached windows, and location references. Choose upstream if you value staying current with NSA's mainline fixes and broad compatibility, because this fork is significantly behind upstream and looks more like a convenience patchset than a full-track alternative.

Choose this fork only if you specifically want its symbolic VSA and struct-inference research code. For normal Ghidra use, upstream is the better default because this fork is extremely stale and likely misses many fixes and features.

Prefer upstream unless you explicitly need this exact older snapshot; this fork adds no documented capabilities and is far behind active Ghidra development.

Choose this fork if your work centers on PowerPC/Gekko/Broadway analysis and you value the added processor support and decompiler cleanups. Choose upstream instead if you want the broadest, freshest Ghidra baseline with less maintenance burden.

Choose this fork if your work is specifically centered on MediaTek firmware or MIPS analysis and you want the added scripts and processor support. Choose upstream if you need current Ghidra fixes, broader compatibility, or active maintenance.

Prefer upstream unless you specifically need an old, frozen Ghidra snapshot. This fork shows no added capability and is materially behind current upstream maintenance.

Prefer upstream Ghidra unless you specifically need a frozen older baseline; this fork shows no visible enhancements and is far behind current upstream maintenance.

Choose this fork if ARCompact support is the requirement; otherwise upstream Ghidra is the better default because this fork is highly specialized and substantially behind upstream.