Supply Chain Attacks: Securing Your Shop Stack
A shop's largest attack surface is not the frontend, it is the build. How supply chain attacks via npm and Composer actually unfold, and which measures catch them beforehand.
Insights on e-commerce, web development and digital solutions
Here you find our articles about online shops, websites and web tech. We explain new rules, tools and good ways of working. You can filter the articles by topic. At the top of an article you find a short version in plain words. Ask us if something is still not clear.
A shop's largest attack surface is not the frontend, it is the build. How supply chain attacks via npm and Composer actually unfold, and which measures catch them beforehand.
As soon as a shop gets an AI advisor, a new attack surface opens up: language models do not separate instruction from data. What that means in practice and which layers hold.
B2B buyers increasingly prefer a rep-free buying process, yet the quoting stage is where it slows down. How an end-to-end RFQ workflow from quote cart to one-click order takes days out of the quoting process.
Filter and sort URLs turn a few thousand products into millions of pages – Google names faceted navigation as the single largest cause of crawling problems. A decision matrix instead of guesswork: which facets deserve a landing page, which belong out of the crawl, and why robots.txt and noindex are not interchangeable.
The CJEU requires every advertised price advantage to be calculated against the lowest price of the last 30 days. Here is how to couple price history, lowest price and discount badges properly.
Internal search is the highest purchase-intent path in the shop and usually the worst maintained. A working guide to relevance configuration of OpenSearch-based shop search: minimum_should_match, compound words, synonyms, product codes, autocomplete and variant search.
Business customers expect fast activation, net prices and verified company data. Onboard B2B customers with automated VAT ID checks, a trade register match and correct reverse-charge logic.
The Cyber Resilience Act affects everyone placing products with digital elements on the EU market. The reporting duty has applied since 11 Sep 2026, CE marking and SBOM follow from 11 Dec 2027. What online shops should do now.
Since 1 July 2026, the 150-euro duty-free threshold is gone. What the transitional flat charge, IOSS, and the 2028 EU customs data platform mean for pricing, checkout, and shipping.
Larger targets, terms explained, input help, clear focus, no time limits
You decide which optional data processing to allow.
Our anonymous reach measurement runs without cookies and without IP storage, including campaign parameters in links – we do not ask for consent for it because none is legally required.
Strictly required: language preference, core site functions and storing your cookie choice. Without these the site does not work. Settings you choose yourself (light/dark appearance, accessibility) are kept in your browser's local storage only once you choose them; "Reset" in the accessibility settings removes them.
Records your interactions (clicks, scrolling, inputs) pseudonymously so we can spot usability issues. Form field inputs are masked automatically before storage; your IP address is not saved with the recording. Served from our own domain, no external tool. Opt-in, revocable any time.