Recently I’ve been wondering which of these two libraries would be the most recommended for resource authorisation, regardless of the app purpose (but maybe taking into account different app sizes and structures).

I would very much like to know your thoughts about these two libraries, and what are the reasons one should choose one of them over another:

• Bodyguard: GitHub - schrockwell/bodyguard: Simple authorization conventions for Phoenix apps · GitHub - 265 stars, 18 forks, 10 contributors
• canary: GitHub - cpjk/canary: 🐣 Elixir authorization and resource-loading library for Plug applications. · GitHub - 373 stars, 45 forks, 12 contributors

At a first glance (not having used any), the best thought I can have is: the first one (Bodyguard) seems a little less invasive, simpler and easier to test, but also harder to find rules and maintain, and the latter (canary) makes authorisation more centralised (thus making its rules easier for modification and maintenance).

Thanks in advance.