
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
product-relations-plugin
Advanced tools
The Product Relations Plugin for Medusa extends your e-commerce capabilities by adding dedicated entities to manage customer purchases and services more effectively. This plugin introduces two key concepts:
Additionally, this plugin enhances product variants by allowing you to create references to other products, such as spare parts or replacements, making it easier to manage product relationships and accessories.
When plugin is installed, new menu options should appear in backoffice. There are dedicated pages to manage Service instances and Assets with ability to create, modify and delete them.
You can find admin API definition in repo files.
This starter is compatible with versions >= 2.4.0 of @medusajs/medusa.
package.json:...
"product-relations-plugin": "^1.4.7"/ // or other available version
...
Execute install (yarn install)
Add plugin to uour medusa-config.js:
...
plugins: [
{
resolve: "product-relations-plugin",
options: {}
}
]
...
npx medusa db:migrate
---
config:
class:
hideEmptyMembersBox: true
---
classDiagram
ServiceInstance --> PaymenntTypeEnum : has
ServiceInstance --> ServiceItemStatusEnum : has
ServiceInstance "0..*" <--> "0..*" Asset
ServiceInstance "1" --> "1" ProductVariant
Asset "1" --> "1" Address
Asset "1" --> "1" Customer
ServiceInstance "1" --> "1" Customer
Asset "1" --> "1" ProductVariant
ProductVariant "1" --> "0..*" ProductReference
ProductReference --> ProductVariant_
class ServiceInstance{
String name
Date startDate
Date endDate
Date purchaseDate
Price price
}
class PaymenntTypeEnum{
ONE_TIME
WEEKLY
MONTHLY
YEARLY
}
class ServiceItemStatusEnum{
ACTIVE
INACTIVE
RETIRED
}
class Asset{
String name
String serialNumber
String thumbnail
Date endOfWarranty
}
class Address{
}
class ProductVariant{
}
class Customer{
}
class ProductReference{
SPARE_PART
COMPATIBLE_SERVICE
}
FAQs
A starter for Medusa plugins.
We found that product-relations-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.