Shopify App Script Bloat & 429 Estimator
Every installed app injects JavaScript bundles that fight for mobile main-thread CPU time. Check your active app categories to estimate latency and cart rate-limit risk.
Installed App Categories
Toggle the categories running on your storefront
When shoppers rapidly switch variants or open the cart drawer, these apps generate multiple concurrent /cart.js requests, risking Shopify's 40-request burst limit.
Identifies orphaned scripts from uninstalled apps in 60s
How to Use This Estimator
Accurately profile your store's third-party script burden in 3 simple steps.
Audit Active Apps
Open your Shopify Admin under Settings → Apps and sales channels. Check off each category currently running on your live storefront.
Evaluate 429 Risk
Observe the Leaky Bucket depletion meter. If your burst requests exceed 20 calls, rapid variant clicks can trigger HTTP 429 errors that freeze Add-to-Cart.
Review Action Plan
Implement client-side request debouncing, migrate tracking into Shopify Customer Events Web Pixels, or purge orphaned snippets from uninstalled apps.
What to Expect & How to Interpret Your Metrics
📦 Total JS Payload Thresholds
- < 250 KB (Optimal): Smooth 60fps animations. Near-zero main-thread contention on mobile hardware.
- 250 KB – 550 KB (Moderate): Noticeable hesitation during cart drawer slide-in on mid-tier Android devices.
- > 550 KB (High Bloat): High risk of frame drops, slow Interaction to Next Paint (INP), and mobile cart abandonment.
⏱️ Mobile Total Blocking Time (TBT)
- < 200 ms: Google PageSpeed Insights "Good" threshold. User clicks execute immediately.
- 200 ms – 600 ms: Noticeable lag between user tap and cart drawer opening.
- > 600 ms: Shoppers perceive buttons as unresponsive, triggering frantic repeated taps and cart dropouts.
Shopify enforces a client-side rate limit on all storefront Ajax endpoints (such as /cart.js, /cart/add.js, and /cart/change.js). Each distinct IP is allocated a bucket of 40 request units that replenishes at 2 units/second. When 4 apps make simultaneous calls during a quick variant toggle, all 40 units can be exhausted in under a second, returning HTTP 429 Too Many Requests.
Recommended Technical Teardowns
Discover the exact orphaned scripts running on your live store.
Checkout Detective's Script Profiler monitors live network requests and DOM event listeners — pinpointing dead code and unhandled crashes in 60 seconds.
Compatible with Google Chrome, Brave, Microsoft Edge, and Opera. No credit card required.