Coinbase Commerce API library
57%
Total Score
caution
Usable with caveats: releases stopped in May 2020 and recent repository activity is absent.
The package declares Apache-2.0, but the artifact license file is detected as MIT; both the artifact and repository contain license files, so the release is licensed but its terms are inconsistent.
The package has only three releases, with the latest on May 5, 2020 and none in the last 12 months. This is a meaningful maintenance concern for a library integration.
The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in November 2023. This supports an abandonment concern despite the repository remaining unarchived.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.0 | — | — |
guzzlehttp/guzzle Version ~5.0|~6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.