Build Works in Security & Compliance

Adds an EU consumer right-of-withdrawal compliance flow to Magento 2 storefronts, letting guests and customers submit Article 11a withdrawal requests through a guided form. Sends durable-medium receipt emails, ships Annex I text in 22 EU locales, and provides an admin grid with status workflow and CSV export.

17 4,456 0 1.1.2 1d

Defense-in-depth protection against the PolyShell unrestricted file upload vulnerability (APSB25-94) affecting Adobe Commerce and Magento Open Source up to 2.4.9-alpha2, hardening image content validation and processing with polyglot file scanning and a strict extension allowlist. Supersedes the original markshust patch.

62 104,748 5 1.3.5 8d

Logs admin actions, login attempts, and page visits for audit trails. Tracks field-level changes and allows reverting data for supported entities.

29 13,784 0 2.0.2 8d

Implements the EU right of withdrawal via button click as required by EU Directive 2023/2673, adding a clearly visible withdrawal button to the customer account area for easy contract cancellation starting June 2026.

24 11,323 11 v1.9.3 19d

Provides a dashboard to view Composer packages, their status, and security advisories. Sends email reminders about package upgrades and security issues.

15 3,200 0 0.7.0 19d

Provides PHP methods to determine a customer's country based on their IP address. Enables features like automatic currency and language switching.

55 262,520 0 2.3.6 30d

Helps Magento 2 stores comply with GDPR by allowing customers to delete accounts and addresses. The Pro version adds billing document management and cookie restrictions.

52 347,602 1 4.2.9 30d

Manages Content Security Policy rules via Magento CLI, storing them in env.php for environment-specific control without database access. Includes automatic CSP header splitting to avoid size limits on servers.

0 304 0 2.0.0 41d

Helps Magento 2 websites comply with GDPR by adding cookie consent, privacy policy links, and consent checkboxes. Allows customers to delete their accounts and manage personal data.

10 8,008 0 1.0.6 44d

Read-only Magento 2 security scanner that runs whitebox checks — version/patch status, MAGE_MODE, admin URL, 2FA coverage, env.php permissions, Composer advisories, core file integrity, and more — and emits a structured JSON report with severities and remediation links.

0 79 0 v1.6.2 54d

Friendly Captcha integration for Magento2

19 137,421 10 4.3.0 56d