Its release history is active, with 42 releases and four in the last year. The package includes a README and declares MIT licensing, but these positives do not resolve the provenance concern.
42%
Total Score
0
100
83
The registry namespace is bkpsdm-karawang, but the linked repository is owned by the unrelated Seldaek user account. The ownership mismatch weakens confidence that the source repository backs this package.
The linked repository is named monolog and neither matches the package name nor mentions it in its README, strongly suggesting that the repository may not belong to this package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12|^13 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^12|^13 | — | — |
illuminate/database Version ^12|^13 | — | — |
illuminate/pagination Version ^12|^13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.