Commerce Platforms & DTC
Shopify

One Shopify variant reported 999,999 units in stock — and it wasn't a bug

Every Shopify storefront publishes its full product catalog as public JSON. No login, no API key, no headless browser: GET https:///products. json?limit=250&page=1 Enter. . .
dev.to
September 19, 2026
7
One Shopify variant reported 999,999 units in stock — and it wasn't a bug
WHAT HAPPENED
until a page returns an emptyproductsarray, which is your only end-of-catalog marker: this endpoint returns no total count and noLinkheader. What surprised me is thatthe bulk feed silently omits four fields that a second, equally public endpoint on the same store returns in full— and that when you finally get those fields, one of them will lie to you. json # one product Enter fullscreen modeExit fullscreen mode Neither requires authentication. barcode)against the bulk feed, you will conclude that no Shopify store on earth publishes barcodes. The per-product endpoint returns the same variantids with all four fields populated, when the store publishes them.
Continue reading from the original publisher for the complete report and source context.
READ ORIGINAL STORY