Laravel and / or Symfony application HIPAA compliance practices

I recently took a job and the current team seems to be maintaining their own custom framework (mostly object oriented, but written in raw php), citing HIPAA compliance as their reasoning to not trust an approach with something like Laravel or Symfony. These guys seem to put a ton of labor into maintaining this framework, when they are mostly working to re-create what Laravel and Symfony have already done better.

I am new to HIPAA though. Is there any merit to the argument of building your own framework over HIPAA compliance? If not what approaches need to be taken to make Laravel and Symfony applications HIPAA compliant?

I would like to at least urge our team to swap out components of the framework with opensource code, if we can do so and be compliant.

Thanks for you help!

from Newest questions tagged laravel-5 - Stack Overflow http://bit.ly/2GJ9Kf6
via IFTTT