
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
storenest-commerce
Advanced tools
Complete e-commerce SDK for Storenest platform with React components, multi-language support, secure checkout, and enterprise-grade security
A complete e-commerce SDK for the Storenest platform with React components, multi-language support, and secure checkout functionality.
npm install storenest-commerce
import { CheckoutBox } from 'storenest-commerce';
function MyCheckoutPage() {
const handleSuccess = (orderId: string) => {
console.log('Order placed successfully:', orderId);
};
const handleError = (error: string) => {
console.error('Checkout error:', error);
};
return (
<CheckoutBox
config={{
locale: 'hr', // Croatian
currency: 'EUR',
theme: 'modern',
showOrderSummary: true
}}
onSuccess={handleSuccess}
onError={handleError}
/>
);
}
import { SimpleCheckoutBox } from 'storenest-commerce';
const checkout = new SimpleCheckoutBox({
locale: 'de', // German
currency: 'EUR',
theme: 'modern'
}, {
onSuccess: (orderId) => console.log('Order placed:', orderId),
onError: (error) => console.error('Error:', error)
});
checkout.render('checkout-container');
locale: 'hr'locale: 'en' (default)locale: 'de'interface CheckoutBoxProps {
config?: {
theme?: 'modern' | 'classic' | 'minimal';
currency?: string;
locale?: 'hr' | 'en' | 'de';
showOrderSummary?: boolean;
enableGuestCheckout?: boolean;
};
onSuccess?: (orderId: string) => void;
onError?: (error: string) => void;
onCancel?: () => void;
}
interface SimpleCheckoutConfig {
theme?: 'modern' | 'classic' | 'minimal';
currency?: string;
locale?: 'hr' | 'en' | 'de';
showOrderSummary?: boolean;
enableGuestCheckout?: boolean;
}
The SDK uses a Hybrid Approach for maximum security:
storenest-commerce)import {
CheckoutBox,
SimpleCheckoutBox,
StorenestCheckout,
login,
register,
createOrGetGuestUser
} from 'storenest-commerce';
storenest-commerce/server)import {
StorenestServerCheckout,
initializeStorenest,
placeOrder,
getOrder
} from 'storenest-commerce/server';
The components use inline styles for maximum compatibility. You can override styles by wrapping the components:
<div style={{
'--storenest-primary': '#667eea',
'--storenest-secondary': '#764ba2'
}}>
<CheckoutBox config={{ theme: 'modern' }} />
</div>
// pages/api/checkout.ts
import { initializeStorenest, placeOrder } from 'storenest-commerce/server';
initializeStorenest({
apiBaseUrl: 'https://api.storenest.io',
apiKey: process.env.STORENEST_API_KEY,
secretKey: process.env.STORENEST_SECRET_KEY
});
export default async function handler(req, res) {
const confirmation = await placeOrder({
userId: 123,
cartId: 'cart_123',
deliveryMethodId: 1,
paymentMethodId: 1,
address: {
firstName: 'John',
lastName: 'Doe',
email: 'john@example.com',
address: '123 Main St',
city: 'Zagreb',
zipCode: '10000',
country: 'HR'
}
});
res.json(confirmation);
}
npm run build
# Run the demo shop
cd demo-shop
npm run dev
MIT License - see LICENSE file for details.
Built with ❤️ by Storenest
FAQs
Complete e-commerce SDK for Storenest platform with React components, multi-language support, secure checkout, and enterprise-grade security
We found that storenest-commerce demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.