Shopify “zombie apps”: check support, not just age

LetsMetrix’s maintenance figures are vendor signals, not security findings. Here is how to check whether an app still supports your store.

SSophie Harrington2 min read

A Shopify app’s age or falling review count cannot tell you whether it is safe or still supported. A new LetsMetrix post makes app maintenance worth checking, but its numbers need a narrower reading than “the typical Shopify app is abandoned”.

What the vendor measured

In its Q3 2026 report, covering its public App Store crawl through 30 September, LetsMetrix labels a live app a “zombie” when it has no changelog and its net review count has fallen over three months. It reports 231 such apps, up from 100 in Q2, or roughly 0.8% of its live app population.

The report also gives a median age at abandonment of 567 days, versus 716 previously. That is a measure concerning abandoned apps, not a demonstrated expiry date for every app. The vendor’s public summary does not provide app code audits or establish that these apps contain vulnerabilities. Its explanation linking the trend to AI competition is an interpretation, not a measured causal result.

These are LetsMetrix’s classifications and figures, not Shopify’s official security findings. We have checked the published definition and figures, but have not reproduced the underlying crawl.

Read the original vendor post if the embed does not load.

Why declining reviews are not a verdict

Shopify’s app selection guide says reviews can be removed or archived. A lower total therefore needs context. The Built for Shopify badge is a useful quality signal, but it is not a promise that a developer will maintain an app indefinitely.

For merchants, our suggested check is practical: ask the developer whether the feature you rely on is supported, how urgent problems are handled and where updates are documented. Read recent reviews for recurring issues, then compare those accounts with the developer’s response. Test the workflow that matters to your store rather than treating stars or a label as a substitute.

Where to get help

For an installed third party app, Shopify’s support instructions direct you to Settings → Apps → the app’s menu → Get support. Include what failed, when it began, steps to reproduce it and relevant screenshots. Shopify says it follows up after three days; that is not a guaranteed resolution time.

Before replacing a critical app, list the functions and data you would need to preserve. Our recommendation is to test the replacement and agree a rollback plan before removing the existing tool. A maintenance concern deserves investigation; it does not justify disrupting checkout, consent or subscriptions without a plan.

ℹ️
A vendor’s maintenance label is a prompt to check support. It is not evidence that an app has been breached.
Filed underNews

More from News

See all →