Shopify API Library for PHP
50%
Total Score
caution
Usable with caveats: maintenance is unproven and the linked repository may not belong to this package.
The registry and repository are owned by the same individual account, so there is no organizational backing shown to compensate for the thin maintenance evidence.
There are 33 releases, but all 33 occurred within the last 12 months and the median interval is zero days, so the history shows publication volume rather than an established release cadence.
The repository has zero commits and zero active maintainers in the last three months, leaving current maintenance capacity unproven despite the recent release record.
The repository name does not match the package name and its README does not mention the package, raising a concrete concern that the linked source may not actually belong to this release.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 || ^2.0 || ^3.0 | — | — |
ramsey/uuid Version ^4.1 | — | — |
guzzlehttp/psr7 Version ^2.0 | — | — |
psr/http-client Version ^1.0 | — | — |
firebase/php-jwt Version ^5.2 || ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.