Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[2.1.1] - 2026-09-23

The Admin API token tool never returned a token. Chrome closes an extension popup as soon as the page asks for access to a store, so the request was killed mid-flight and the host permission could be left granted. The tool now runs on its own page (token.html), opened from the popup; the popup's Admin API tab explains and links to it. Verified end to end against a mock Shopify token endpoint: request shape, cookie-free POST, masked token, credentials cleared, two-minute auto-clear, and Shopify's error message on bad credentials.

Renamed to Theme Inspector for Shopify (formerly Shopify Theme Check), with a "not affiliated with Shopify" notice in the popup, listing, README and privacy policy.
New icon: a storefront under a magnifier on a deeper green, with a simplified 16px version and the 16px padding Chrome recommends at 128px.
Font tags now show how many scanned pages use each font, instead of a raw count of CSS declarations.
Inter fonts ship as woff2 (1.3 MB of .ttf down to 0.4 MB).
Clearer messages on browser pages and other tabs that can't be inspected.

App detection from Shopify theme app blocks (shopify://apps/<handle>/blocks/… comments), which names apps by their App Store handle. Found 3 extra apps on a live Shopify Plus store in testing.
Popup footer with "Send feedback" and "Missing an app?" (prefilled GitHub issue) links, and a "Rate it" link shown to store installs after a completed Deep Scan.
Uninstall feedback page, opened by Chrome via chrome.runtime.setUninstallURL (no permission needed).
Website at atul8007.github.io/stc-website: landing page with FAQ and SoftwareApplication/FAQPage structured data, privacy policy, changelog, uninstall page, llms.txt and sitemap. Built from docs/ by scripts/build_docs.py and published to the public stc-website repo (which also hosts issues and releases) by scripts/sync_site.py.
Chrome Web Store listing copy and images in store/.
"Missing app" issue template.

Deep Scan requests now run inside the active tab, so they are same-origin with the store. Without host permissions, popup-origin requests are subject to CORS, and failures were silently counted as scanned pages.
Font names containing the letters of "important" (e.g. Montserrat) were mangled by the fallback font parser.
Generic app detection matched across unrelated attributes; it now matches each script/link URL individually.
Class and id app signatures (e.g. .jdgm-widget) are now checked on deep-scanned pages.
16px toolbar icon was 21x21; regenerated at 16x16.
Removed Font Awesome @font-face rules for regular/v4-compat fonts that were not bundled (console 404s).

Deep Scan never requests cart, checkout, account, order, search, or password pages.
Deep Scan uses 2 concurrent requests with a pause between each, and stops on HTTP 429 or 430.
Deep Scan samples every sitemap round-robin, so the 100-page cap covers products, collections, pages, and blogs.
Deep Scan reports analyzed vs. unavailable pages and why a scan stopped.
Share links (e.g. facebook.com/sharer) are no longer listed as social profiles.
Added scripts/package.py to build the Web Store zip from runtime files only.

Added clear disclosures for the Admin API token generator and its credential handling.
Updated the privacy policy and extension description to match current behavior.
Report unknown theme publication status accurately.
Separated the Theme Inspector and Admin API tools into accessible popup tabs.