gnikyt/basic-shopify-api
The source repository is not archived and includes tests, a changelog, and a matching package name. Six workflow actions are unpinned, and no security policy is present.
61%
Total Score
50
100
92
75
Health Score Breakdown
The latest registry release was about 3 years and 10 months ago, with no releases in the last 12 months. This is a meaningful maintenance concern despite the 40-release history.
The repository recorded no commits and no active maintainers in the last 3 months. Although it was pushed in January 2025, current activity is still limited.
All 6 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkout, script injection, or high-severity workflow issue, so this remains a hygiene caution rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tyler King |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^6.5 || ^7.0 | — | — |
caseyamcl/guzzle_retry_middleware Version ^2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.