The Pina2 Framework.
70%
Total Score
caution
Recent commits support this release, but all recent work comes from one contributor and the project lacks security tooling.
The release declares 12 runtime dependencies, including several extensions and libraries. This is a meaningful dependency surface but not unusually large for a PHP framework.
The package has existed for over 10 years with 135 releases, but only 2 releases were published in the last 12 months. This indicates established history with a slower recent release cadence.
One contributor made all 20 commits in the last 3 months, giving the project a bus factor of one. Organization backing partly compensates by allowing maintenance to be handed off, but the observed activity remains concentrated.
The repository received 20 commits in the last 3 months, showing current maintenance. However, all activity came from one active maintainer, limiting resilience.
There are 2 open issues and no pull requests, with no issues or pull requests created or closed in the last month. This provides little evidence of an active user community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 | — | — |
monolog/monolog Version 2.10.* | — | — |
pinahq/sql-parser Version 0.3.1 | — | — |
symfony/http-foundation Version ^5.0 | — | — |
alex-yashin/php-simple-html Version dev-main#85de8922fad5fb89d4ffe33db0e67f37c54dca07 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.