shopify/shopify-api

The source tree is substantial, licensed, tested, and recently released. Repository activity is currently sparse and concentrated in one contributor, so the replacement should be preferred for new projects.

Latest v6.1.1

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Registry deprecation

Packagist marks the entire package abandoned and names shopify/shopify-app-php as the replacement. This is a major adoption and maintenance warning even though the assessed release itself is not withdrawn.

Repo bus factor

One contributor made all two recent commits, giving the project a concentrated recent commit base. Shopify's organizational ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activity

Only two commits were recorded in the last three months, indicating sparse recent development. This lowers confidence in ongoing maintenance, although the repository has not been archived.

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent. The shared Shopify ownership helps, but does not remove this caution.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Shopify Inc.

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^1.1 \|\| ^2.0 \|\| ^3.0	—	—
ramsey/uuid Version ^4.1	—	—
guzzlehttp/psr7 Version ^2.0	—	—
psr/http-client Version ^1.0	—	—
firebase/php-jwt Version ^7.0	—	—