
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
yaktool-store-mcp
Advanced tools
Store product CSV as an MCP server: forecast what a WooCommerce import will actually do — which rows create, which are silently skipped, which columns never map — and convert a Shopify export into a WooCommerce import without losing variants or reversing
Store product CSV as an MCP server — the store-domain suite of yaktool.com.
WooCommerce imports rarely fail loudly. A row whose SKU already exists is skipped, a column the importer does not recognise is dropped, and the run still reports success. Both tools here are built around telling you what will happen before it happens. 61 documented rules (40 WooCommerce, 21 migration), each with an id, a severity and a fix. No network I/O.
validate_woocommerce_csv — forecast the import twice over: once with Update existing
products ticked and once without, because that single checkbox is the difference between
"prices updated" and "every row skipped, run reported as successful". Also lists the columns
the importer will not map — where data silently disappears — and runs full GS1 validation on
the GTIN column, whose bad values only surface later in a marketplace feed.migrate_store_csv — convert a Shopify product export into a WooCommerce import.
Handles the two things hand-rolled conversions get wrong: variable products need a parent row
the export does not contain, and sale price direction is reversed between the platforms
(Shopify's Compare At Price is the higher one; WooCommerce's Sale price is the lower).
The output is checked by the same validator above before it is returned.claude mcp add yaktool-store -- npx -y yaktool-store-mcp
Same engine as the browser tools at yaktool.com/ecommerce/woocommerce-csv-validator.
FAQs
Store product CSV as an MCP server: forecast what a WooCommerce import will actually do — which rows create, which are silently skipped, which columns never map — and convert a Shopify export into a WooCommerce import without losing variants or reversing
We found that yaktool-store-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.