Composer · packagist.org

phanan/koel

Remote Payload: matched "cUrl "

Why PkgRadar flagged v9.6.0

Severity	Signal	Evidence
medium	Remote Payload	matched "cUrl " · koel-koel-352ea5e/app/Services/SongStorages/CloudStorage.php
medium	Remote Payload	matched "cURL " · koel-koel-352ea5e/tests/Integration/Services/ApplicationInformationServiceTest.php

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v9.6.0`	Review	13	2026-05-31
`v9.5.0`	Review	13	2026-05-29

Block this in CI

PkgRadar gates phanan/koel (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer phanan/[email protected]