1. Advisor
  2. JavaScript packages
  3. commerce-sdk-react

commerce-sdk-react

v0.0.1-deprecated

A library that provides react hooks for fetching data from Commerce Cloud For more information about how to use this package see README

Latest version published 1 year ago
License: BSD-3-Clause
NPM
GitHub

Ensure you're using the healthiest npm packages

Snyk scans all the packages in your projects for vulnerabilities and provides automated fix advice

This is a malicious package

commerce-sdk-react is a malicious package. This package contains a malware that includes a reverse shell code and binds shell scripts. As these packages are dependancy confusion packages, these packages are malicious if they have been downloaded and installed from the npm repository. Installation of these packages from other repositories or CDNs are likely safe to use. These spoofed packages have no relation to the company or project they are attempting to spoof, and are not published by them or associated with them in any way. Users should verify that the package they are using has been downloaded from the official source and not from the general package distribution repository. Snyk cannot automatically identify where a package has been downloaded from and will mark any use of the package as malicious to allow users to check whether they have been compromised. Avoid using all malicious instances of the package.

Security

Security issues found
All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

All Versions
Version Vulnerabilities License Risk
0.0.1-deprecated | 05/2023
Popular
  • 0
    H
  • 0
    M
  • 0
    L
License
BSD-3-Clause
Security Policy
Yes

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Limited

Weekly Downloads (5)

Download trend
GitHub Stars
285
Forks
133
Contributors
50

Direct Usage Popularity

The npm package commerce-sdk-react receives a total of 5 downloads a week. As such, we scored commerce-sdk-react popularity level to be Limited.

Based on project statistics from the GitHub repository for the npm package commerce-sdk-react, we found that it has been starred 285 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Active
Readme.md
Yes
Contributing.md
Yes
Code of Conduct
Yes
Contributors
50
Funding
No

With more than 10 contributors for the commerce-sdk-react repository, this is possibly a sign for a growing and inviting community.

Embed Package Health Score Badge

package health: 39/100 package health 39/100

Maintenance

Inactive
deprecated

Commit Frequency

Open Issues
75
Open PR
39
Last Release
1 year ago
Last Commit
16 days ago

Further analysis of the maintenance status of commerce-sdk-react based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for commerce-sdk-react is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Keep your project healthy

scan-reversed

Check your package.json

NEW
Ensure all the packages you're using are healthy and well-maintained
arrow
intellij

Snyk Vulnerability Scanner

external
Get health score & security insights directly in your IDE
arrow

Package

Node.js Compatibility
^16.11.0 || ^18.0.0
Age
2 years
Dependencies
4 Direct
Versions
5
Install Size
10.6 kB
Dist-tags
1
# of Files
8
Maintainers
1
TS Typings
No

commerce-sdk-react has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.