Manifest
    by Manifold
    Back to Results
    3.11.12

    Shopify Liquid

    A complete developer experience for Shopify themes

    Programming LanguagesLintersLanguage Packs
    Rank#304
    Publisher ShopifyRegistry openvsx124,472Last scanned Oct 2, 2026, 06:47 PMRegistryHomepageGitHub
    Created
    3 years ago
    Last commit
    last week
    Latest release
    @shopify/theme-language-server-browser@2.22.3last week

    Security Findings

    8

    pull_request_target with secrets

    MaliciousLineage

    [.github/workflows/cla.yml] pull_request_target with secrets

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: Polyj...****

    dist/node/data/filters.json

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: Passw...****

    dist/node/data/shopify_system_translations.json

    OWASP-AST04

    Hardcoded secrets/API keys2×

    SuspiciousScanner

    Secret Keyword: TSPri...****

    Secret Keyword: priva...****

    dist/node/prettier/parser-typescript.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: Polyj...****

    dist/browser/server.js

    OWASP-AST04

    Install-lifecycle script shipped2×

    SuspiciousScanner

    package.json postinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): pnpm --dir ./syntaxes --ignore-workspace install --no-lockfile

    package.json preinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): sh scripts/fetch-syntaxes.sh

    OWASP-AST02OWASP-AST06