Package Health

thijmendf/groundwork

Groundwork, a lightweight PHP Framework

Latest v0.9.1PackagistPackagist

38%

Total Score

unhealthy

No releases or commits for about four years, and the README still describes the framework as alpha.

Health Score Breakdown

Release historydanger

The package has had no releases in the last 12 months, and its latest release was on June 5, 2022. This indicates prolonged release inactivity for a framework dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers during the measured three-month period. Combined with the old latest release, this is strong evidence of abandonment risk.

Dependency profilecaution

The framework declares 15 runtime dependencies, including database, HTTP, templating, mail, and utility components. That breadth is plausible for a framework but increases transitive maintenance and update burden.

Licensecaution

The artifact contains a license file, but it is detected as GPL-3.0 while the manifest declares MIT. This unresolved mismatch creates legal uncertainty despite the presence of licensing text.

Maintainerscaution

The registry lists one maintainer. The linked repository is user-owned rather than organization-backed, so there is little visible redundancy if that maintainer stops working on the project.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Thijmen de Frankrijker

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version ^3.3
—
—
symfony/mime
Version ^5.3
—
—
nesbot/carbon
Version ^2.50
—
—
psr/container
Version ^2.0.2
—
—
symfony/dotenv
Version 5.4.x-dev
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform