cazzzt/shopify-graphql
The MIT license and simple Composer artifact make its contents easy to inspect. There is no security policy, and the project shows no recent maintenance, leaving updates and fixes uncertain.
38%
Total Score
0
70
75
Health Score Breakdown
The package has made no releases in the last 12 months, and its latest release was in January 2018 despite being over eight years old. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, with its last push in January 2018. No provided signal shows compensating maintenance activity.
The artifact includes a short README, which provides minimal consumer guidance; the absence of tests and a changelog is normal for published artifacts and is not treated as a gap here.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a meaningful transparency gap for a package that wraps an external API.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Claudio Pinto |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 cfpinto/graphql Version ^0.0.8 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.