Supply Chain Attacks: Securing Your Shop Stack
A shop's largest attack surface is not the frontend, it is the build. How supply chain attacks via npm and Composer actually unfold, and which measures catch them beforehand.
Insights on e-commerce, web development and digital solutions
Here you find our articles about online shops, websites and web tech. We explain new rules, tools and good ways of working. You can filter the articles by topic. At the top of an article you find a short version in plain words. Ask us if something is still not clear.
A shop's largest attack surface is not the frontend, it is the build. How supply chain attacks via npm and Composer actually unfold, and which measures catch them beforehand.
As soon as a shop gets an AI advisor, a new attack surface opens up: language models do not separate instruction from data. What that means in practice and which layers hold.
Filter and sort URLs turn a few thousand products into millions of pages – Google names faceted navigation as the single largest cause of crawling problems. A decision matrix instead of guesswork: which facets deserve a landing page, which belong out of the crawl, and why robots.txt and noindex are not interchangeable.
Internal search is the highest purchase-intent path in the shop and usually the worst maintained. A working guide to relevance configuration of OpenSearch-based shop search: minimum_should_match, compound words, synonyms, product codes, autocomplete and variant search.
Beyond gut feeling: an AI-driven shop analysis checks product page, funnel and mobile against proven UX heuristics, finds conversion killers and sorts them by revenue impact. How the method works and what it delivers.
Date of application 27 Sept 2026: an online shop must show the official notice on the legal guarantee prominently and unchanged. How we set it up with the core feature of Shopware 6.7.14.
Share of Model, citation rate and AI referral conversion as reliable KPIs: how shops make their visibility in language models measurable and controllable.
Local prices instead of foreign currency: how to handle exchange rates, price rounding and per-country tax in Shopware to reduce cross-border cart abandonment.
Web push notifications bring visitors back to your shop – without requiring an installed app and without handing data to third parties.
Larger targets, terms explained, input help, clear focus, no time limits
You decide which optional data processing to allow.
Our anonymous reach measurement runs without cookies and without IP storage, including campaign parameters in links – we do not ask for consent for it because none is legally required.
Strictly required: language preference, core site functions and storing your cookie choice. Without these the site does not work. Settings you choose yourself (light/dark appearance, accessibility) are kept in your browser's local storage only once you choose them; "Reset" in the accessibility settings removes them.
Records your interactions (clicks, scrolling, inputs) pseudonymously so we can spot usability issues. Form field inputs are masked automatically before storage; your IP address is not saved with the recording. Served from our own domain, no external tool. Opt-in, revocable any time.