PHP SDK to connect with Shopify Custom, Public and Private App using REST Api and Graphql
35%
Total Score
unhealthy
Risky: the package closely resembles Shopify's established SDK while having no release activity since 2021.
The package borrows the identity of shopify/shopify-api, which has far more downloads and stable releases; it is not described as a fork and most likely is not what consumers seeking that SDK intended.
There have been no releases in roughly five years, and no releases in the last 12 months. Eight total releases provide some history, but the long gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, indicating that maintenance has effectively stopped recently.
Seven stars, four forks, and one watcher indicate a very small user and contributor base, leaving little visible community support if maintenance stops.
Composer is used for builds, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rdx/graphql-query Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.