Pith Framework - Another simple framework for PHP sites
56%
Total Score
caution
Usable with caveats: active releases are offset by proof-of-concept status, one-person maintenance, and a large dependency surface.
The package declares 42 runtime dependencies, including many framework and frontend components, which increases update, compatibility, and transitive-maintenance exposure.
Only one registry account has publishing access. This is consistent with the repository being user-owned, but it leaves little publishing redundancy.
The repository owner is an individual user rather than an organization, so there is no organizational backing shown to compensate for concentrated maintenance.
One contributor made all 43 commits in the last 3 months, creating a significant handoff and continuity risk for a user-owned project.
There are no open issues, but two pull requests remain open and none were merged in the last month, offering limited evidence of collaborative review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ikm/cli Version ^0 | — | — |
amphp/amp Version ^3.0 | — | — |
pith/base Version ^0.2 | — | — |
pith/tick Version ^0.1 | — | — |
latte/latte Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.