Lychee (LycheeOrg)
Depends
Confidence: Medium
Buy it if you can run and patch a server and want your photos off cloud services . it is free, open source, and actively maintained.
New check
Comparison
Lychee (LycheeOrg) and Immich both land on Depends.
Buy it if you can run and patch a server and want your photos off cloud services . it is free, open source, and actively maintained.
Buy it if you already run a home server and want Google Photos features without Google.
| Compare | Lychee (LycheeOrg) | Immich |
|---|---|---|
| Verdict | Depends | Depends |
| Best for | Self-hosters comfortable with Docker | Homelabbers comfortable with Docker |
| Who it's not for | Non-technical users wanting plug-and-play photo backup | Non-technical users without a server |
| Privacy | 11 known CVEs plus GitHub advisories; project publishes and patches them, but you must run current releases. | Multiple CVEs disclosed in 2025-2026 (auth bypass, XSS, privilege escalation, OAuth account hijacking); keep patched and limit internet exposure. |
| Support quality | Volunteer community only; no vendor support. | Community-driven; managed hosting via Elestio exists |
| Public sentiment | Self-hosters weigh Lychee against Piwigo, PhotoPrism, and Immich; long-term users are loyal, but the project leans on stretched volunteer maintainers.11 | Self-hosters love it once running, but report setup friction, family-sharing headaches, and occasional reliability doubts. |
| Biggest gotcha | Several 2026 CVEs (SSRF, stored XSS) mean you must update fast. | Exposing Immich to the internet without VPN or firewall is the top attack vector users get burned on |