Is @shopify/app-bridge safe to use?

@shopify/app-bridge has no known vulnerabilities on the latest version (3.7.11). DepScope rates its health at 70/100 (moderate risk).

What is the latest version of @shopify/app-bridge?

The latest version of @shopify/app-bridge is 3.7.11, released 2025-11-20.

Does @shopify/app-bridge have known vulnerabilities?

No known vulnerabilities on the latest version of @shopify/app-bridge.

Is @shopify/app-bridge deprecated?

No, @shopify/app-bridge is actively maintained. Latest release: 3.7.11 (2025-11-20).

What are alternatives to @shopify/app-bridge?

Popular alternatives to @shopify/app-bridge in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @shopify/app-bridge use?

@shopify/app-bridge is licensed under MIT.

@shopify/app-bridge

npmv3.7.11

> **Maintenance Mode:** Although apps using this package will continue to function, it is no longer receiving updates. For new projects, please use the [CDN version of App Bridge](https://shopify.dev/docs/api/app-home?accordionItem=getting-started-build-y

License MITpermissive325 versions6 maintainers3 deps55,711 weekly dl

Shopify/app-bridge

/ 100

Health

safe to use

@shopify/[email protected] is safe to use (health: 70/100)

Health breakdown0 – 100

15/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

base64url web-vitals @shopify/app-bridge-core

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@shopify/app-bridge