Audio streaming solution that works.
84%
Total Score
healthy
Healthy, with frequent releases and active repository work offsetting a highly concentrated contributor base.
Although nine contributors were active in three months, one contributor made 102 of 112 commits, or about 91%. That concentration creates a meaningful continuity risk despite the broader contributor count.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and process gap, not evidence of an unsafe release by itself.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The active project evidence partly offsets this, but the disclosure gap remains.
| Title | Versions | Severity |
|---|---|---|
CVE-2026-54494 phanan/koel is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 9.7.0. | 0.0.0 - 9.7.0 | Medium |
CVE-2026-50552 phanan/koel is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 9.7.0. | 0.0.0 - 9.7.0 | Medium |
CVE-2026-54491 phanan/koel is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 9.7.0. | 0.0.0 - 9.7.0 | High |
CVE-2026-54493 phanan/koel is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 9.6.0. | 0.0.0 - 9.6.0 | High |
CVE-2026-54492 phanan/koel is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 9.6.0. | 0.0.0 - 9.6.0 | Medium |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/ai Version ^0.7.0 | — | — |
laravel/ui Version ^4.5 | — | — |
laravel/scout Version ^11.0 | — | — |
phanan/poddle Version ^1.2.4 | — | — |
predis/predis Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.