kyon147/laravel-shopify
Shopify package for Laravel to aide in app development
88%
Total Score
healthy
Recent releases and active contributors support this package, while unpinned CI actions and limited security controls reduce confidence.
Health Score Breakdown
Composer build tooling is present, but no security scanning tools are reported, leaving a modest transparency and maintenance-control gap.
The repository has no security policy. This does not show a defect in the code, but it reduces clarity about vulnerability reporting and response.
Both workflows were analyzed without high- or medium-severity findings and have no untrusted checkouts or script injection. However, all 7 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10361 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. kyon147/laravel-shopify is vulnerable to Information Disclosure in versions 17.3.3 - 23.0.0. | 17.3.3 - 23.0.0 | High |
Package versions
Maintainers
 Luke (Kyon147) |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jenssegers/agent Version ^2.6 | — | — |
laravel/framework Version ^12.0 || ^13.0 | — | — |
funeralzone/valueobjects Version ^0.5 | — | — |
gnikyt/basic-shopify-api Version ^9.0 || ^10.0 || ^11.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.