Package Health/@shopify/shopify-app-remix

@shopify/shopify-app-remix

Shopify Remix - to simplify the building of Shopify Apps with Remix

Latest 6.0.2

NPM

82%

Total Score

healthy

Active Shopify-backed maintenance and verified publishing outweigh a high-confidence workflow injection finding.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All 16 workflows were analyzed, but the audit found a high-confidence template-injection issue and one untrusted checkout in a pull_request_target workflow. The cache-poisoning finding is low confidence, while only three of 43 action references are unpinned.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-831388 @shopify/shopify-app-remix is vulnerable to Improper Verification of Cryptographic Signature in versions 1.2.0 - 4.2.1.	1.2.0 - 4.2.1	Medium

Package versions

Maintainers

Direct Dependencies

Dependency	Last Release	Score
isbot Version ^5.2.0	—	—
compare-versions Version ^6.1.1	—	—
@shopify/shopify-api Version ^15.0.1	—	—
@remix-run/server-runtime Version ^2.17.5	—	—
@shopify/admin-api-client Version ^2.0.1	—	—