@coinbase/wallet-sdk
Coinbase Wallet JavaScript SDK
82%
Total Score
healthy
Healthy, with Coinbase-backed maintenance and verified publishing; all workflow actions are unpinned.
Health Score Breakdown
The package has 105 releases over roughly 4.5 years, but only one release in the last 12 months; this suggests slower release activity, though the latest release is current.
Only two commits from two maintainers were recorded in the last three months, indicating limited recent development activity even though it is not concentrated on one person.
All six workflows were analyzed with no untrusted checkouts, script injection, or high-confidence findings, but all 18 action references are unpinned and one workflow has top-level write permissions; this is a workflow hygiene caution, not a severe risk on its own.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10097 @coinbase/wallet-sdk is vulnerable to Missing Encryption of Sensitive Data in versions 4.0.0 - 4.2.4. | 4.0.0 - 4.2.4 | Critical |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 clsx Version ^1.2.1 | — | — |
viem Version ^2.27.2 | — | — |
preact Version ^10.24.2 | — | — |
@noble/hashes Version ^1.4.0 | — | — |
eventemitter3 Version ^5.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 17 days ago
- Created
- 4 years ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.