Security & Compliance

Disables Content Security Policy (CSP) in Magento 2. Simplifies disabling CSP for shops where it's not required.

22 182,430 0 1.0.4 4d

Provides CSP (Content Security Policy) utilities for other modules, including nonce and hash generation. Helps improve website security by managing CSP directives.

3 929,672 0 1.0.2 4d

Adds nonces to inline scripts in PHTML templates to comply with Content Security Policy (CSP) directives. Allows whitelisting blocks via layout XML or DI plugin.

29 104,118 1 0.1.2 4d

CLI tool that inspects and reports the Content-Security-Policy headers generated for a given Magento URL and policy, making CSP values easier to review than digging through the browser.

4 104 0 1.0.7 4d

Signature-based malware scanner and file integrity monitor that recursively scans the Magento codebase for webshells, backdoors, cryptominers, and injection payloads, with quarantine support, an admin dashboard, scheduled scans, and email alerts.

6 151 0 1.3.8 11d

Logs admin actions, login attempts, and page visits for audit trails. Tracks field-level changes and allows reverting data for supported entities.

29 61,233 1 2.0.4 12d

Hyva theme companion for mageme/module-eu-withdrawal. Re-renders the storefront-facing withdrawal flow with the Hyva design system. Install it when your storefront runs on a Hyva theme.

2 9,849 0 1.1.0 13d

Adds an EU consumer right-of-withdrawal compliance flow to Magento 2 storefronts, letting guests and customers submit Article 11a withdrawal requests through a guided form. Sends durable-medium receipt emails, ships Annex I text in 22 EU locales, and provides an admin grid with status workflow and CSV export.

21 15,531 0 1.2.0 13d

Extends Magento native reCAPTCHA to integrate Google reCAPTCHA Enterprise using the official Google Cloud PHP client, with admin configuration for the Cloud project ID and service-account credentials.

0 173 0 1.1.1 15d

Prevents Magento orders from being placed based on configurable rules, with pluggable matchers for blocking by IP, email, or geolocation.

4 1,741 0 2.2.9 22d

Mitigates PolyShell-style file upload abuse by blocking file custom option uploads and restricting allowed extensions to images only. Includes a CLI command to scan and clear suspicious files from the custom_options media directory.

0 1,182 0 1.0.6 28d