detain/coinbase-commerce

Licensecaution

The manifest declares Apache-2.0, while the artifact license file is detected as MIT; although license files exist in both artifact and repository, the mismatch should be clarified before adoption.

Release historycaution

The package has only 4 releases since August 2022 and 1 release in the last 12 months, indicating a slow maintenance cadence despite a recent release.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, a concrete sign of currently quiet development that increases abandonment risk.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package that handles payment API integrations.