Leaf is an MIT-licensed PHP framework and a set of about 54 packages for building web apps and APIs, used mostly by small teams and solo developers. It has 774k+ installs on Packagist (about 1,500 a day), 1,331 GitHub stars, and supports PHP 8.2 to 8.5. I'm effectively the only maintainer: Leaf has never had an outside security review, six packages have no CI, and security fixes still have to be backported by hand to older majors.