Shopify

High confidence

shopify.com github.com/Shopifyv3 · refreshed yesterday · next in 6 days

Fit

Activity

Your opener

“Given Shopify's active releases for Shopify/cli and heavy monorepo tooling with GitHub Actions, FlowPilot can help accelerate your continuous integration pipelines and automated build workflows.”

Built on: Refers directly to recent Shopify/cli releases and GitHub Actions monorepo usage to connect to FlowPilot's CI acceleration capabilities.

Evidence: M2 R1 F20 F39

Talking points

1Shopify maintains high activity across monorepos utilizing GitHub Actions, Docker, Nx, and pnpm workspaces, where FlowPilot can streamline CI builds and test workflows. F19 F20 F22 F39

Engineering context

Gemini 3.6-flash · from cited evidence only

Shopify operates a polyglot codebase where public code reflects high usage of Ruby at 36.1 percent and TypeScript at 17.5 percent, alongside Rust at 8.5 percent, JavaScript at 13.1 percent, Go at 4.1 percent, and Python at 4.2 percent. Public repositories show monorepo architecture managed with pnpm workspace configuration alongside tools like Nx, Node.js, and Prisma. Infrastructure and CI tooling in public configuration include Docker, GitHub Actions, and CircleCI, with HashiCorp Vault observed via subdomains. Observability configuration incorporates OpenTelemetry and Prometheus. For mobile applications, Shopify utilizes Swift and Kotlin, supported by GraphQL for API layers. Note that public repositories and DNS logs display only a portion of Shopify's complete internal stack.

Shopify maintains high engineering momentum, demonstrated by active development across 128 public repositories pushed within 30 days and frequent releases such as version 4.9.4 of Shopify/cli. Recent engineering initiatives highlight internal automation, including Helix for migrating mobile applications to native Swift and Kotlin, River for automated security fixes in Slack, and Tangle for containerized machine learning pipelines. We observe that Shopify relies heavily on custom internal tools and AI automation. As a hypothesis, this focus on internal orchestration suggests engineering leadership values developer productivity workflows, which could make FlowPilot relevant for optimizing continuous integration pipelines and tracking service dependencies across their TypeScript, Go, and Python services.

Observations vs. hypotheses (4)

ObservationShopify actively uses GitHub Actions, Docker, and pnpm monorepo configurations across its public repositories.

Stack at a glance

Ruby36.1%
TypeScript20%
Rust8.5%
JavaScript8.3%
Go5%
Python3.5%
Liquid3.2%
Other15.2%

Commit activity · 52 weeks

GitHub

Public repos: 1236
Active 30 d: 128
Active 90 d: 164
Contributors: 226
Releases 90 d: 35

Recent releases

cli 4.9.414 Oct 2026
cli 4.9.39 Oct 2026
cli 4.9.29 Oct 2026

Company sources

Only the domain is required. A confirmed GitHub org, job board and blog feed give better evidence; changes apply on the next refresh.

2Shopify invests heavily in developer tooling and automated workflows like River and Helix, indicating a strong culture of developer productivity where FlowPilot could complement existing pipeline tooling. A1 A4 W2 W3

3With active multi-language projects across TypeScript, Go, and Python, FlowPilot can provide service catalog visibility and dependency mapping across distributed services. F2 F5 F6

ObservationShopify is migrating mobile applications to native Swift and Kotlin using internal AI orchestration tooling called Helix. A1 A2 A3 F13 W2

Hypothesis (AI)Shopify's investment in internal tools like Helix and River indicates a high strategic focus on developer productivity and automated engineering workflows. A1 A4 W2 W3

Hypothesis (AI)Shopify's containerized pipelines and monorepo structures suggest they may benefit from remote build caching and automated dependency mapping in CI. F19 F22 F39 W5

Frameworks and libraries

GraphQLReact NativeReactNode.jsPrisma

Containers & orchestration

Docker

CI/CD & build

GitHub ActionsDependabotNxCircleCI

Observability

OpenTelemetryPrometheus

SaaS & tooling

Slack

Architecture signals

Monorepo

Green = 2+ independent sources · blue = public code or 3+ postings. Full evidence in the Infra tab.

Most recently active repos

cliyesterday
theme-tools2 days ago
dotdev-workshop-events2 days ago
shopify-function-test-helpers2 days ago
ui-extensions2 days ago

Activity score

67/100

Commits (90 d)12/30
17 commits across 3 sampled repos
Repos active (30 d)15/15
128 repositories pushed
Repos active (90 d)10/10
164 repositories pushed
Contributors15/15
226 distinct people in top repos
Releases (90 d)15/15
35 releases
Open engineering roles0/15
0 roles

Very active: 128 repositories updated in 30 days; 17 commits in 90 days across sampled repositories.

Product fit

37/100

Target languages21/40
TypeScript 20%, Go 5%, Python 3.5%, Kotlin 1.4%, Java 1.2% of recently active public code
Target clouds0/30
No target cloud detected
Target signals16/30
Docker (medium), GitHub Actions (medium), Monorepo (high)

Against the product profile in Settings.

No public Greenhouse, Lever or Ashby job board could be linked to this company. Set job_board_provider/slug to add one.

Confidence: high = 2+ independent sources · medium = public code/config or 3+ job postings · low = a single weak signal. Click a technology for its evidence.

Frameworks and libraries

GraphQLhigh6 evidenceEvidence
- Confirmed by 2 independent sources (code, web)
- Found in public codeShopify/cli contains `packages/app/src/cli/api/graphql/admin/queries/metafield_definitions.graphql`, `packages/app/src/cli/api/graphql/admin/queries/metaobject_definitions.graphql`, `packages/app/src/cli/api/graphql/app-dev/queries/dev-session-create.graphql`, `packages/app/src/cli/api/graphql/app-dev/queries/dev-session-delete.graphql`, `packages/app/src/cli/api/graphql/app-dev/queries/dev-session-update.graphql` source · 18 Oct 2026
- Found in public code`package.json` in Shopify/cli declares `graphql` source · 18 Oct 2026
- Found in public code`packages/cli-kit/package.json` in Shopify/cli declares `graphql` source · 18 Oct 2026
- Found in public codeShopify/shopify-function-test-helpers contains `test-app/extensions/cart-validation-js/schema.graphql`, `test-app/extensions/cart-validation-js/src/cart_validations_generate_run.graphql`, `test-app/extensions/discount-function-rs/schema.graphql`, `test-app/extensions/discount-function-rs/src/cart_delivery_options_discounts_generate_run.graphql`, `test-app/extensions/discount-function-rs/src/cart_lines_discounts_generate_run.graphql` source · 17 Oct 2026
- Found in public code`package.json` in Shopify/shopify-function-test-helpers declares `graphql` source · 17 Oct 2026
- Web research (Gemini + Google Search)Web research: "Gisting: Compressing LLM Agent context to ↑ throughput and ↓ cost" — Shopify implemented context gisting using knowledge distillation to compress LLM system prompts for its GraphQL agent and reduce GPU serving overhead. source · 1 Aug 2026
- First observed 11 Oct 2026
React Nativehigh4 evidenceEvidence
- Confirmed by 3 independent sources (code, articles, web)
- Found in public code`package.json` in Shopify/flash-list declares `react-native` source · 1 Oct 2026
- Mentioned in published articleBlog post "Migrating Shop app from React Native to native": "Migrating Shop app from React Native to native. We migrated the Shop app from React Native to Swift and Kotlin. Assi…" source · 10 Sept 2026
- Mentioned in published articleBlog post "Native is now the future of mobile at Shopify": "…ged what it costs to build mobile apps twice. Here’s why Shopify is moving from React Native back to Swift and Kotlin." source · 10 Sept 2026
- Web research (Gemini + Google Search)Web research: "Native is now the future of mobile at Shopify" — Shopify detailed its engineering migration from React Native back to native Swift and Kotlin, accelerated by AI coding agents and an internal orchestration tool
Reactmedium6 evidenceEvidence
- Found in public code or configuration
- Found in public code`packages/app/package.json` in Shopify/cli declares `react` source · 18 Oct 2026
- Found in public code`packages/cli-kit/package.json` in Shopify/cli declares `react` source · 18 Oct 2026
- Found in public code`package.json` in Shopify/dotdev-workshop-events declares `react` source · 17 Oct 2026
- Found in public code`package.json` in Shopify/example-checkout--read-custom-data--preact declares `react` source
Node.jsmedium2 evidenceEvidence
- Found in public code or configuration
- Found in public codeShopify/cli contains `.nvmrc` source · 18 Oct 2026
- Found in public codeShopify/ui-extensions contains `.nvmrc` source · 17 Oct 2026
- First observed 11 Oct 2026
Prismamedium2 evidenceEvidence
- Found in public code or configuration
- Found in public code`package.json` in Shopify/dotdev-workshop-events declares `@prisma/client`, `prisma` source · 17 Oct 2026
- Found in public code`package.json` in Shopify/example-checkout--read-custom-data--preact declares `@prisma/client`, `prisma` source · 17 Oct 2026
- First observed 11 Oct 2026

Cloud platforms

Not publicly found

Containers & orchestration

Dockermedium3 evidenceEvidence
- Found in public code or configuration
- Found in public codeShopify/dotdev-workshop-events contains `Dockerfile` source · 17 Oct 2026
- Found in public codeShopify/example-checkout--read-custom-data--preact contains `Dockerfile` source · 17 Oct 2026
- Found in public codeShopify/toxiproxy contains `Dockerfile` source · 14 Oct 2026
- First observed 11 Oct 2026

Infrastructure as code

Not publicly found

CI/CD & build

GitHub Actionsmedium8 evidenceEvidence
- Found in public code or configuration
- Found in public codeShopify/cli contains `.github/workflows/cla.yml`, `.github/workflows/codeql.yml`, `.github/workflows/gardener-backlog-prs.yml`, `.github/workflows/gardener-investigate-issue.yml`, `.github/workflows/gardener-notify-event.yml` source · 18 Oct 2026
- Found in public codeShopify/theme-tools contains `.github/workflows/ci.yml`, `.github/workflows/cla.yml`, `.github/workflows/release.yml`, `.github/workflows/vscode-release.yml` source · 17 Oct 2026
- Found in public codeShopify/shopify-function-test-helpers contains `.github/workflows/ci.yml`, `.github/workflows/cla.yml`, `.github/workflows/release.yml` source · 17 Oct 2026

Observability

OpenTelemetrymedium1 evidenceEvidence
- Found in public code or configuration
- Found in public code`packages/cli-kit/package.json` in Shopify/cli declares `@opentelemetry/api`, `@opentelemetry/core`, `@opentelemetry/exporter-metrics-otlp-http`, `@opentelemetry/resources`, `@opentelemetry/sdk-metrics` source · 18 Oct 2026
- First observed 11 Oct 2026
Prometheusmedium1 evidenceEvidence
- Found in public code or configuration
- Found in public code`go.mod` in Shopify/toxiproxy declares `github.com/prometheus/client_golang` source

Data & messaging

Not publicly found

SaaS & tooling

Slackhigh2 evidenceEvidence
- Confirmed by 2 independent sources (articles, web)
- Mentioned in published articleBlog post "How River takes security work from a fix to merge": "How River takes security work from a fix to merge. River, Shopify’s AI agent in Slack, enables autonomous vulnerability remediation, not just detection." source · 2 Sept 2026
- Web research (Gemini + Google Search)Web research: "How River takes security work from a fix to merge" — Shopify developed River, a Slack-integrated AI agent that autonomously generates, tests, and submits security vulnerability fixes within its monorepo. source · 1 Sept 2026
- First observed 11 Oct 2026
Google Workspacelow

Architecture signals

Monorepohigh6 evidenceEvidence
- Confirmed by 2 independent sources (code, web)
- Found in public codeShopify/cli contains `pnpm-workspace.yaml` source · 18 Oct 2026
- Found in public codeShopify/theme-tools contains `pnpm-workspace.yaml` source · 17 Oct 2026
- Found in public codeShopify/dotdev-workshop-events contains `pnpm-workspace.yaml` source · 17 Oct 2026
- Found in public codeShopify/shopify-function-test-helpers contains `pnpm-workspace.yaml`

Engineering blog

ShopGym: Realistic, reproducible sandboxes for shopping agents
1 Oct 2026
Helix: The internal tool powering our Shopify app's native migration technical
21 Sept 2026
Migrating Shop app from React Native to native technical
10 Sept 2026
Native is now the future of mobile at Shopify technical
10 Sept 2026
How River takes security work from a fix to merge technical
2 Sept 2026

Hacker News

Shopify outage [resolved]
101 points · 3 Jun 2026 · discussion
Shopify's BFCM Live Globe 2025
9 points · 28 Nov 2025 · discussion
Shopify/liquid: Performance: 53% faster parse+render, 61% fewer allocations
8 points · 13 Mar 2026 · discussion
Shopify: What Is Dynamic Pricing? How It Works and Examples (2025)
7 points · 11 Jan 2026 · discussion
Shopify Editions: Winter '26
5 points · 10 Dec 2025 · discussion

Web research · Gemini + Google Search

ShopGym: Realistic, reproducible sandboxes for shopping agents blog
Shopify introduced ShopGym, an evaluation framework using ShopArena and ShopGuru to convert live storefronts into synthetic sandboxes for benchmarking AI shopping agents. · 2026-10
Native is now the future of mobile at Shopify migration
Shopify detailed its engineering migration from React Native back to native Swift and Kotlin, accelerated by AI coding agents and an internal orchestration tool called Helix. · 2026-09
How River takes security work from a fix to merge blog
Shopify developed River, a Slack-integrated AI agent that autonomously generates, tests, and submits security vulnerability fixes within its monorepo. · 2026-09
Gisting: Compressing LLM Agent context to ↑ throughput and ↓ cost

Hosting / CDN: Not found
Email provider: Google Workspace
SaaS verification records: GoogleApple BusinessOpenAIMeta BusinessMicrosoft 365TeamViewerAdobeAtlassianStripeGlobalSignTwilioDocuSign
SPF includes: Google Workspace, Zendesk, SendGrid

410 subdomains in unexpired certificates

api.collabs.shopify.comPublic API
dev.shopify.comDev environment
staging.data.shopify.comStaging environment
status.shopify.comStatus page
vault.shopify.comVault

All changes in v3

“Newly observed” means first seen in public evidence — not newly adopted. “Not re-observed” never means stopped using.

Release
New release: Shopify/cli 4.9.4
Published on GitHub since the previous snapshot.
14 Oct 2026
Release
New release: Shopify/theme-tools @shopify/theme-language-server-browser@2.23.1
Published on GitHub since the previous snapshot.
1 Oct 2026
Release
New release: Shopify/theme-tools @shopify/theme-language-server-node@2.23.1
Published on GitHub since the previous snapshot.
1 Oct 2026
Release
New release: Shopify/theme-tools @shopify/theme-check-browser@3.30.1
Published on GitHub since the previous snapshot.
1 Oct 2026
Release
New release: Shopify/theme-tools @shopify/theme-check-node@3.30.1
Published on GitHub since the previous snapshot.
1 Oct 2026
New repo
New public repository: Shopify/topaz
Created recently and visible for the first time.
14 Oct 2026
New repo
New public repository: Shopify/streamed-modules
Created recently and visible for the first time.
9 Oct 2026
Not re-observed
Not re-observed: Google Cloud
Not found in this refresh's evidence. This does not mean the company stopped using it — a posting may have closed or a repository may have left the sample.
18 Oct 2026
Not re-observed
Not re-observed: Terraform
Not found in this refresh's evidence. This does not mean the company stopped using it — a posting may have closed or a repository may have left the sample.
18 Oct 2026
Not re-observed
Not re-observed: SQLite
Not found in this refresh's evidence. This does not mean the company stopped using it — a posting may have closed or a repository may have left the sample.
18 Oct 2026
Not re-observed
Not re-observed: MySQL
Not found in this refresh's evidence. This does not mean the company stopped using it — a posting may have closed or a repository may have left the sample.
18 Oct 2026
Not re-observed
Not re-observed: Redis
Not found in this refresh's evidence. This does not mean the company stopped using it — a posting may have closed or a repository may have left the sample.
18 Oct 2026

Trend across snapshots

Snapshot	Top languages (180 d)	Commits 90 d
v3 · 18 Oct 2026	Ruby 36.1%, TypeScript 20%, Rust 8.5%	17
v2 · 11 Oct 2026	Ruby 38.1%, TypeScript 20%, Rust 8.6%	34
v1 · 11 Oct 2026	Ruby 38.1%, TypeScript 20%, Rust 8.6%	34

Source status · 18 Oct 2026, 07:47 UTC

GitHub · ok · 53.1sShopify: 300 public repositories (GraphQL), 10 scanned in depth; 49 API calls, 1 cached. source
Job postings · not found · 1.5sNo public Greenhouse, Lever or Ashby job board could be linked to this company. Set job_board_provider/slug to add one.
DNS (Google Public DNS) · ok · 0.1s0 hosting/CDN signals, email: Google Workspace, 12 SaaS verification records, 3 SPF includes.
Certificate Transparency (crt.sh) · ok · 6.9s410 subdomains in unexpired certificates; 5 reveal tooling or environments. source
Hacker News · ok · 0.7s5 engineering stories in the last 12 months (top: 101 points).
Engineering blog (RSS) · ok · 0.3sShopify Engineering: 5 recent posts, 4 technical. source
Web research (Gemini + Google Search) · ok · 27.1s5 grounded findings from 5 Google searches, 11 sources (gemini-3.8-flash).

GitHub identification

Shopify Provided

GitHub organization provided on the watchlist.

Research confidence · High

GitHub identification	Organization provided on the watchlist	25/25
Code coverage	10 public repositories analyzed	25/25
Source diversity	Code, DNS, Certificate logs, Articles, Web research	25/25
Recency	Newest evidence dated 2026-10-18	25/25

How confidence is scored

GitHub identification (25): provided or confirmed by website 25 · name match only 8 · none 0
Code coverage (25): ≥8 repositories analyzed 25 · 4–7 18 · 1–3 10 · none 0
Source diversity (25): independent source families with findings (code, job postings, DNS, certificate logs, articles, web research) — 3+ → 25 · 2 → 18 · 1 → 10
Recency (25): newest dated evidence ≤30 days 25 · ≤90 days 18 · ≤1 year 10 · older 4 · none 0
Level: High ≥ 75 · Medium 45–74 · Low < 45. An unconfirmed GitHub match caps the level at Medium; no findings caps it at Low.

Limitations

Public repositories, job postings, DNS records and articles show only part of a company's technology stack; private repositories and internal systems are not visible.
300 most recently updated of 1236 public repositories were analysed for languages and activity.

Evidence pack given to Gemini (65 facts)

F1Ruby [Programming languages] — medium confidence (Found in public code or configuration), 36.1% of public code. e.g. 36.1% of code across 284 public repositories (36.1% in repos pushed in the last 180 days); largest in Shopify/shopify-api-ruby (16 Oct 2026) source
F2TypeScript [Programming languages] — medium confidence (Found in public code or configuration), 17.5% of public code. e.g. 17.5% of code across 284 public repositories (20% in repos pushed in the last 180 days); largest in Shopify/shopify-app-js (16 Oct 2026) source
F3JavaScript [Programming languages] — medium confidence (Found in public code or configuration), 13.1% of public code. e.g. 13.1% of code across 284 public repositories (8.3% in repos pushed in the last 180 days); largest in Shopify/agent-skills (17 Jun 2026) source
F4Rust [Programming languages] — medium confidence (Found in public code or configuration), 8.5% of public code. e.g. 8.5% of code across 284 public repositories (8.5% in repos pushed in the last 180 days); largest in Shopify/rubydex (16 Oct 2026) source
F5Python [Programming languages] — medium confidence (Found in public code or configuration), 4.2% of public code. e.g. 4.2% of code across 284 public repositories (3.5% in repos pushed in the last 180 days); largest in Shopify/topaz

First observed 11 Oct 2026

Found in public code`package.json` in Shopify/flash-list declares `react` source · 1 Oct 2026

Found in public code`documentation/package.json` in Shopify/flash-list declares `react` source · 1 Oct 2026

First observed 11 Oct 2026

Found in public codeShopify/ui-extensions contains `.github/workflows/changesets-reminder.yml`, `.github/workflows/ci.yml`, `.github/workflows/cla.yml`, `.github/workflows/deploy.yml`, `.github/workflows/internal-snapshot.yml` source · 17 Oct 2026

Found in public codeShopify/toxiproxy contains `.github/workflows/analysis.yml`, `.github/workflows/cla.yml`, `.github/workflows/release.yml`, `.github/workflows/test.yml` source · 14 Oct 2026

Found in public codeShopify/go-lua contains `.github/workflows/cla.yml` source · 7 Oct 2026

First observed 11 Oct 2026

Dependabotmedium6 evidenceEvidence

Found in public code or configuration
Found in public codeShopify/cli contains `.github/dependabot.yml` source · 18 Oct 2026
Found in public codeShopify/theme-tools contains `.github/dependabot.yaml` source · 17 Oct 2026
Found in public codeShopify/toxiproxy contains `.github/dependabot.yml` source · 14 Oct 2026
Found in public codeShopify/go-lua contains `.github/dependabot.yml` source · 7 Oct 2026
Found in public codeShopify/flash-list contains `.github/dependabot.yml` source · 1 Oct 2026
Found in public codeShopify/liquid contains `.github/dependabot.yaml` source · 24 Sept 2026
First observed 11 Oct 2026

Nxmedium2 evidenceEvidence

Found in public code or configuration
Found in public codeShopify/cli contains `nx.json` source · 18 Oct 2026
Found in public code`package.json` in Shopify/cli declares `nx` source · 18 Oct 2026
First observed 11 Oct 2026

CircleCImedium1 evidenceEvidence

Found in public code or configuration
Found in public codeShopify/go-lua contains `.circleci/config.yml` source · 7 Oct 2026
First observed 11 Oct 2026

First observed 11 Oct 2026

Single weak signal (dns)
DNS recordMX → alt4.aspmx.l.google.com source
DNS recordSPF include:_spf.google.com (Google Workspace) source
First observed 11 Oct 2026

Adobelow1 evidenceEvidence

Single weak signal (dns)
DNS recordTXT verification record for Adobe source
First observed 11 Oct 2026

Apple Businesslow1 evidenceEvidence

Single weak signal (dns)
DNS recordTXT verification record for Apple Business source
First observed 11 Oct 2026

Atlassianlow1 evidenceEvidence

Single weak signal (dns)
DNS recordTXT verification record for Atlassian source
First observed 11 Oct 2026

DocuSignlow1 evidenceEvidence

Single weak signal (dns)
DNS recordTXT verification record for DocuSign source
First observed 11 Oct 2026

HashiCorp Vaultlow1 evidenceEvidence

Single weak signal (subdomain)
Subdomain (certificate log)Subdomain vault.shopify.com (certificate transparency log) suggests Vault source
First observed 11 Oct 2026

Meta Businesslow1 evidenceEvidence

Single weak signal (dns)
DNS recordTXT verification record for Meta Business source
First observed 11 Oct 2026

Microsoft 365low1 evidenceEvidence

Single weak signal (dns)
DNS recordTXT verification record for Microsoft 365 source
First observed 11 Oct 2026

SendGridlow1 evidenceEvidence

Single weak signal (dns)
DNS recordSPF include:sendgrid.net (SendGrid) source
First observed 11 Oct 2026

Stripelow1 evidenceEvidence

Single weak signal (dns)
DNS recordTXT verification record for Stripe source
First observed 11 Oct 2026

Twiliolow1 evidenceEvidence

Single weak signal (dns)
DNS recordTXT verification record for Twilio source
First observed 11 Oct 2026

Zendesklow1 evidenceEvidence

Single weak signal (dns)
DNS recordSPF include:mail.zendesk.com (Zendesk) source
First observed 11 Oct 2026

Found in public codeShopify/example-checkout--read-custom-data--preact contains `pnpm-workspace.yaml` source · 17 Oct 2026

Web research (Gemini + Google Search)Web research: "How River takes security work from a fix to merge" — Shopify developed River, a Slack-integrated AI agent that autonomously generates, tests, and submits security vulnerability fixes within its monorepo. source · 1 Sept 2026

First observed 11 Oct 2026

Shopify implemented context gisting using knowledge distillation to compress LLM system prompts for its GraphQL agent and reduce GPU serving overhead. · 2026-08

Tangle: An open-source ML experimentation platform built at Shopify scale open source

Shopify open-sourced Tangle, a distributed machine learning experimentation platform featuring global artifact caching and containerized pipeline orchestration. · 2025-12

Public repositories and DNS records represent only a subset of Shopify's complete internal infrastructure and codebase.

No public job postings were available to confirm current engineering hiring priorities or internal cloud tooling.

Public repository activity reflects open-source and SDK work, which may differ from core backend internal architectures.

F6Go [Programming languages] — medium confidence (Found in public code or configuration), 4.1% of public code. e.g. 4.1% of code across 284 public repositories (5% in repos pushed in the last 180 days); largest in Shopify/ghostferry (14 Oct 2026) source

F7Liquid [Programming languages] — medium confidence (Found in public code or configuration), 2.8% of public code. e.g. 2.8% of code across 284 public repositories (3.2% in repos pushed in the last 180 days); largest in Shopify/horizon (13 Oct 2026) source

F8Swift [Programming languages] — medium confidence (Found in public code or configuration), 2.4% of public code. e.g. 2.4% of code across 284 public repositories (2.7% in repos pushed in the last 180 days); largest in Shopify/mobile-buy-sdk-ios (7 Apr 2026) source

F9C++ [Programming languages] — medium confidence (Found in public code or configuration), 1.8% of public code. e.g. 1.8% of code across 284 public repositories (2.8% in repos pushed in the last 180 days); largest in Shopify/heap-profiler (31 Jul 2026) source

F10C [Programming languages] — medium confidence (Found in public code or configuration), 1.5% of public code. e.g. 1.5% of code across 284 public repositories (1.6% in repos pushed in the last 180 days); largest in Shopify/mruby-engine (15 Sept 2026) source

F11HTML [Programming languages] — medium confidence (Found in public code or configuration), 1.5% of public code. e.g. 1.5% of code across 284 public repositories (1.5% in repos pushed in the last 180 days); largest in Shopify/liquid-spec (28 Sept 2026) source

F12PHP [Programming languages] — medium confidence (Found in public code or configuration), 1.3% of public code. e.g. 1.3% of code across 284 public repositories (1.1% in repos pushed in the last 180 days); largest in Shopify/shopify-app-php (9 Oct 2026) source

F13Kotlin [Programming languages] — high confidence (Confirmed by 2 independent sources (articles, web)), 0.9% of public code. e.g. Blog post "Helix: The internal tool powering our Shopify app's native migration": "…ive migration. We built Helix to help LLMs rebuild the Shopify app in Swift and Kotlin, using small checkpoints and strict quality gates to keep the code shippable." (21 Sept 2026) source

F14GraphQL [Frameworks and libraries] — high confidence (Confirmed by 2 independent sources (code, web)). e.g. Shopify/cli contains `packages/app/src/cli/api/graphql/admin/queries/metafield_definitions.graphql`, `packages/app/src/cli/api/graphql/admin/queries/metaobject_definitions.graphql`, `packages/app/src/cli/api/graphql/app-dev/queries/dev-session-create.graphql`, `packages/app/src/cli/api/graphql/app-dev/queries/dev-session-delete.graphql`, `packages/app/src/cli/api/graphql/app-dev/queries/dev-session-update.graphql` (18 Oct 2026) source

F15React Native [Frameworks and libraries] — high confidence (Confirmed by 3 independent sources (code, articles, web)). e.g. `package.json` in Shopify/flash-list declares `react-native` (1 Oct 2026) source

F16React [Frameworks and libraries] — medium confidence (Found in public code or configuration). e.g. `packages/app/package.json` in Shopify/cli declares `react` (18 Oct 2026) source

F17Node.js [Frameworks and libraries] — medium confidence (Found in public code or configuration). e.g. Shopify/cli contains `.nvmrc` (18 Oct 2026) source

F18Prisma [Frameworks and libraries] — medium confidence (Found in public code or configuration). e.g. `package.json` in Shopify/dotdev-workshop-events declares `@prisma/client`, `prisma` (17 Oct 2026) source

F19Docker [Containers & orchestration] — medium confidence (Found in public code or configuration). e.g. Shopify/dotdev-workshop-events contains `Dockerfile` (17 Oct 2026) source

F20GitHub Actions [CI/CD & build] — medium confidence (Found in public code or configuration). e.g. Shopify/cli contains `.github/workflows/cla.yml`, `.github/workflows/codeql.yml`, `.github/workflows/gardener-backlog-prs.yml`, `.github/workflows/gardener-investigate-issue.yml`, `.github/workflows/gardener-notify-event.yml` (18 Oct 2026) source

F21Dependabot [CI/CD & build] — medium confidence (Found in public code or configuration). e.g. Shopify/cli contains `.github/dependabot.yml` (18 Oct 2026) source

F22Nx [CI/CD & build] — medium confidence (Found in public code or configuration). e.g. Shopify/cli contains `nx.json` (18 Oct 2026) source

F23CircleCI [CI/CD & build] — medium confidence (Found in public code or configuration). e.g. Shopify/go-lua contains `.circleci/config.yml` (7 Oct 2026) source

F24OpenTelemetry [Observability] — medium confidence (Found in public code or configuration). e.g. `packages/cli-kit/package.json` in Shopify/cli declares `@opentelemetry/api`, `@opentelemetry/core`, `@opentelemetry/exporter-metrics-otlp-http`, `@opentelemetry/resources`, `@opentelemetry/sdk-metrics` (18 Oct 2026) source

F25Prometheus [Observability] — medium confidence (Found in public code or configuration). e.g. `go.mod` in Shopify/toxiproxy declares `github.com/prometheus/client_golang` (14 Oct 2026) source

F26Slack [SaaS & tooling] — high confidence (Confirmed by 2 independent sources (articles, web)). e.g. Blog post "How River takes security work from a fix to merge": "How River takes security work from a fix to merge. River, Shopify’s AI agent in Slack, enables autonomous vulnerability remediation, not just detection." (2 Sept 2026) source

F27Google Workspace [SaaS & tooling] — low confidence (Single weak signal (dns)). e.g. MX → alt4.aspmx.l.google.com source

F28Adobe [SaaS & tooling] — low confidence (Single weak signal (dns)). e.g. TXT verification record for Adobe source

F29Apple Business [SaaS & tooling] — low confidence (Single weak signal (dns)). e.g. TXT verification record for Apple Business source

F30Atlassian [SaaS & tooling] — low confidence (Single weak signal (dns)). e.g. TXT verification record for Atlassian source

F31DocuSign [SaaS & tooling] — low confidence (Single weak signal (dns)). e.g. TXT verification record for DocuSign source

F32HashiCorp Vault [SaaS & tooling] — low confidence (Single weak signal (subdomain)). e.g. Subdomain vault.shopify.com (certificate transparency log) suggests Vault source

F33Meta Business [SaaS & tooling] — low confidence (Single weak signal (dns)). e.g. TXT verification record for Meta Business source

F34Microsoft 365 [SaaS & tooling] — low confidence (Single weak signal (dns)). e.g. TXT verification record for Microsoft 365 source

F35SendGrid [SaaS & tooling] — low confidence (Single weak signal (dns)). e.g. SPF include:sendgrid.net (SendGrid) source

F36Stripe [SaaS & tooling] — low confidence (Single weak signal (dns)). e.g. TXT verification record for Stripe source

F37Twilio [SaaS & tooling] — low confidence (Single weak signal (dns)). e.g. TXT verification record for Twilio source

F38Zendesk [SaaS & tooling] — low confidence (Single weak signal (dns)). e.g. SPF include:mail.zendesk.com (Zendesk) source

F39Monorepo [Architecture signals] — high confidence (Confirmed by 2 independent sources (code, web)). e.g. Shopify/cli contains `pnpm-workspace.yaml` (18 Oct 2026) source

M1GitHub activity Very active; activity score 67/100 (previous snapshot 70). 128 repos pushed in 30 days, 164 in 90 days; 17 commits in 90 days across 3 sampled repos; 226 contributors; 35 releases in 90 days. (18 Oct 2026) source

M2Recently active repository Shopify/cli (last push 2026-10-18) (18 Oct 2026) source

M3Recently active repository Shopify/theme-tools (last push 2026-10-17) (17 Oct 2026) source

M4Recently active repository Shopify/dotdev-workshop-events (last push 2026-10-17, 3 commits in 52 weeks) (17 Oct 2026) source

R1Release 4.9.4 of Shopify/cli published 2026-10-14 (14 Oct 2026) source

R2Release 4.9.3 of Shopify/cli published 2026-10-09 (9 Oct 2026) source

R3Release 4.9.2 of Shopify/cli published 2026-10-09 (9 Oct 2026) source

R4Release 4.9.1 of Shopify/cli published 2026-10-09 (9 Oct 2026) source

R5Release 4.9.0 of Shopify/cli published 2026-10-08 (8 Oct 2026) source

R6Release 4.8.5 of Shopify/cli published 2026-10-06 (6 Oct 2026) source

N1New public repository Shopify/treewalker created 2026-09-30 (30 Sept 2026) source

N2New public repository Shopify/shop created 2026-10-07 (7 Oct 2026) source

N3New public repository Shopify/claude-for-commerce-examples created 2026-09-01 (1 Sept 2026) source

N4New public repository Shopify/mock-shop-starter created 2026-09-08 (8 Sept 2026) source

D2Email: Google Workspace. SaaS verification records: Google, Apple Business, OpenAI, Meta Business, Microsoft 365, TeamViewer, Adobe, Atlassian, Stripe, GlobalSign, Twilio, DocuSign.

S1410 subdomains in certificate logs; tooling-revealing: api.collabs.shopify.com (Public API), dev.shopify.com (Dev environment), staging.data.shopify.com (Staging environment), status.shopify.com (Status page), vault.shopify.com (Vault)

A1“Helix: The internal tool powering our Shopify app's native migration” (engineering blog) (21 Sept 2026) source

A2“Migrating Shop app from React Native to native” (engineering blog) (10 Sept 2026) source

A3“Native is now the future of mobile at Shopify” (engineering blog) (10 Sept 2026) source

A4“How River takes security work from a fix to merge” (engineering blog) (2 Sept 2026) source

A5“Shopify outage [resolved]” (Hacker News, 101 points) (3 Jun 2026) source

W1Web research (blog): “ShopGym: Realistic, reproducible sandboxes for shopping agents” — Shopify introduced ShopGym, an evaluation framework using ShopArena and ShopGuru to convert live storefronts into synthetic sandboxes for benchmarking AI shopping agents. (1 Oct 2026) source

W2Web research (migration): “Native is now the future of mobile at Shopify” — Shopify detailed its engineering migration from React Native back to native Swift and Kotlin, accelerated by AI coding agents and an internal orchestration tool called Helix. (1 Sept 2026) source

W3Web research (blog): “How River takes security work from a fix to merge” — Shopify developed River, a Slack-integrated AI agent that autonomously generates, tests, and submits security vulnerability fixes within its monorepo. (1 Sept 2026) source

W4Web research (blog): “Gisting: Compressing LLM Agent context to ↑ throughput and ↓ cost” — Shopify implemented context gisting using knowledge distillation to compress LLM system prompts for its GraphQL agent and reduce GPU serving overhead. (1 Aug 2026) source

W5Web research (open_source): “Tangle: An open-source ML experimentation platform built at Shopify scale” — Shopify open-sourced Tangle, a distributed machine learning experimentation platform featuring global artifact caching and containerized pipeline orchestration. (1 Dec 2025) source

Shopify

Your opener

Talking points

Engineering context

Stack at a glance

Commit activity · 52 weeks

Recent releases

Company sources

What's changed

Most recently active repos

Activity score

Product fit

Frameworks and libraries

Cloud platforms

Containers & orchestration

Infrastructure as code

CI/CD & build

Observability

Data & messaging

SaaS & tooling

Architecture signals

Engineering blog

Hacker News

Web research · Gemini + Google Search

All changes in v3

Trend across snapshots

Source status · 18 Oct 2026, 07:47 UTC

GitHub identification

Research confidence · High

Limitations