Package Health

phanan/koel

Audio streaming solution that works.

Latest v9.15.0PackagistPackagist

84%

Total Score

healthy

Healthy, with frequent releases and active repository work offsetting a highly concentrated contributor base.

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factorcaution

Although nine contributors were active in three months, one contributor made 102 of 112 commits, or about 91%. That concentration creates a meaningful continuity risk despite the broader contributor count.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and process gap, not evidence of an unsafe release by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The active project evidence partly offsets this, but the disclosure gap remains.

Vulnerabilities

TitleVersionsSeverity
CVE-2026-54494
phanan/koel is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 9.7.0.
0.0.0 - 9.7.0
Medium
CVE-2026-50552
phanan/koel is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 9.7.0.
0.0.0 - 9.7.0
Medium
CVE-2026-54491
phanan/koel is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 9.7.0.
0.0.0 - 9.7.0
High
CVE-2026-54493
phanan/koel is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 9.6.0.
0.0.0 - 9.6.0
High
CVE-2026-54492
phanan/koel is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 9.6.0.
0.0.0 - 9.6.0
Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
laravel/ai
Version ^0.7.0
—
—
laravel/ui
Version ^4.5
—
—
laravel/scout
Version ^11.0
—
—
phanan/poddle
Version ^1.2.4
—
—
predis/predis
Version ~1.0
—
—

Weekly Downloads

Info

Last Published
13 days ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform