Groundwork, a lightweight PHP Framework
38%
Total Score
unhealthy
No releases or commits for about four years, and the README still describes the framework as alpha.
The package has had no releases in the last 12 months, and its latest release was on June 5, 2022. This indicates prolonged release inactivity for a framework dependency.
There were zero commits and zero active maintainers during the measured three-month period. Combined with the old latest release, this is strong evidence of abandonment risk.
The framework declares 15 runtime dependencies, including database, HTTP, templating, mail, and utility components. That breadth is plausible for a framework but increases transitive maintenance and update burden.
The artifact contains a license file, but it is detected as GPL-3.0 while the manifest declares MIT. This unresolved mismatch creates legal uncertainty despite the presence of licensing text.
The registry lists one maintainer. The linked repository is user-owned rather than organization-backed, so there is little visible redundancy if that maintainer stops working on the project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.3 | — | — |
symfony/mime Version ^5.3 | — | — |
nesbot/carbon Version ^2.50 | — | — |
psr/container Version ^2.0.2 | — | — |
symfony/dotenv Version 5.4.x-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.