ashikkaiser/coinbase-commerce

Release historydanger

The package has had only one release, v1.0.1, published 1462 days ago, with no releases in the last 12 months. That leaves compatibility and maintenance concerns for a production dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the package's stated lack of active maintenance.

Licensecaution

The package declares Apache-2.0, but the detected LICENSE file is MIT. Because the detected license does not match the manifest declaration, licensing should be clarified before use.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. That is a modest hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy, leaving no documented path for reporting vulnerabilities or coordinating fixes. This adds transparency risk for an API client handling credentials.