The Base Commerce C SDK is a pre-built library that implements the Base Commerce API (which integrates Credit Card Processing, ACH processing, Secured Vault, and a Push Notifications Platform). The Base Commerce SDKs are available in other languages as well. This allows developers to drop the library into applications and start communicating with the Base Commerce platform.
Secret API Keys add a layer of security to APIs and who can access what functions, but a simple flaw in the common implementation in GitHub leaves many API Keys exposed to external developers. This tutorial by Moshe Shaham explains this error, as well as how to leverage it to find API keys.
Learn how Freemius, a WordPress plugin business services company that provides management tools to developers, dealt with a security vulnerability in its SDK. The company describes the struggles it had working with people in the industry as it tried to manage how best to roll out its fix.