{"id":13406646,"url":"https://github.com/vuestorefront/vue-storefront","last_synced_at":"2026-01-12T00:02:43.888Z","repository":{"id":38427273,"uuid":"100346588","full_name":"vuestorefront/vue-storefront","owner":"vuestorefront","description":"Alokai is a Frontend as a Service solution that simplifies composable commerce. It connects all the technologies needed to build and deploy fast \u0026 scalable ecommerce frontends. It guides merchants to deliver exceptional customer experiences quickly and easily.","archived":false,"fork":false,"pushed_at":"2025-08-21T11:06:27.000Z","size":134516,"stargazers_count":10892,"open_issues_count":52,"forks_count":2094,"subscribers_count":258,"default_branch":"main","last_synced_at":"2025-12-14T13:23:03.935Z","etag":null,"topics":["commercetools","e-commerce","ecommerce","ecommerce-platform","headless","headless-commerce","integrations-team","magento","magento2","mobile","nuxt","open-source","pwa","shopify","shopware","storefront","typescript","vue","vue-storefront","vue3"],"latest_commit_sha":null,"homepage":"https://www.alokai.com","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/vuestorefront.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2017-08-15T06:33:52.000Z","updated_at":"2025-12-12T06:42:02.000Z","dependencies_parsed_at":"2024-02-19T12:55:53.422Z","dependency_job_id":"bb75fbc4-6efb-4638-a13d-2f26e23f8315","html_url":"https://github.com/vuestorefront/vue-storefront","commit_stats":{"total_commits":12038,"total_committers":438,"mean_commits":"27.484018264840184","dds":0.8829539790662901,"last_synced_commit":"5d9870237b0e09713136794adcd23af2a18f040f"},"previous_names":["divanteltd/vue-storefront"],"tags_count":268,"template":false,"template_full_name":null,"purl":"pkg:github/vuestorefront/vue-storefront","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vuestorefront%2Fvue-storefront","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vuestorefront%2Fvue-storefront/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vuestorefront%2Fvue-storefront/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vuestorefront%2Fvue-storefront/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/vuestorefront","download_url":"https://codeload.github.com/vuestorefront/vue-storefront/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vuestorefront%2Fvue-storefront/sbom","scorecard":{"id":41109,"data":{"date":"2025-08-04","repo":{"name":"github.com/vuestorefront/vue-storefront","commit":"e8c657325a47fa1b7d55dc792624ac76acc1e7be"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":5.5,"checks":[{"name":"Code-Review","score":8,"reason":"Found 22/25 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-integrations.yml:22","Warn: no topLevel permission defined: .github/workflows/cd-integrations.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-integrations.yml:1","Warn: no topLevel permission defined: .github/workflows/continuous-delivery.yml:1","Warn: no topLevel permission defined: .github/workflows/continuous-integration.yml:1","Warn: no topLevel permission defined: .github/workflows/sonarcloud-integrations.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.md:0","Info: FSF or OSI recognized license: MIT License: LICENSE.md:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd-integrations.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/vuestorefront/vue-storefront/cd-integrations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd-integrations.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/vuestorefront/vue-storefront/cd-integrations.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cd-integrations.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/vuestorefront/vue-storefront/cd-integrations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-integrations.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/vuestorefront/vue-storefront/ci-integrations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-integrations.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/vuestorefront/vue-storefront/ci-integrations.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-integrations.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/vuestorefront/vue-storefront/ci-integrations.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-integrations.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/vuestorefront/vue-storefront/ci-integrations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-integrations.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/vuestorefront/vue-storefront/ci-integrations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-integrations.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/vuestorefront/vue-storefront/ci-integrations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonarcloud-integrations.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/vuestorefront/vue-storefront/sonarcloud-integrations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonarcloud-integrations.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/vuestorefront/vue-storefront/sonarcloud-integrations.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sonarcloud-integrations.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/vuestorefront/vue-storefront/sonarcloud-integrations.yml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/vuestorefront/.github/SECURITY.md:1","Info: Found linked content: github.com/vuestorefront/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/vuestorefront/.github/SECURITY.md:1","Info: Found text in security policy: github.com/vuestorefront/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: all commits (28) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"16 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-75v8-2h7p-7m2m","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-g5hg-p3ph-g8qg","Warn: Project is vulnerable to: GHSA-fjgf-rc76-4x9p","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T21:34:12.251Z","repository_id":38427273,"created_at":"2025-08-14T21:34:12.251Z","updated_at":"2025-08-14T21:34:12.251Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28328695,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-11T22:11:01.104Z","status":"ssl_error","status_checked_at":"2026-01-11T22:10:58.990Z","response_time":60,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["commercetools","e-commerce","ecommerce","ecommerce-platform","headless","headless-commerce","integrations-team","magento","magento2","mobile","nuxt","open-source","pwa","shopify","shopware","storefront","typescript","vue","vue-storefront","vue3"],"created_at":"2024-07-30T19:02:35.597Z","updated_at":"2026-01-12T00:02:43.862Z","avatar_url":"https://github.com/vuestorefront.png","language":"TypeScript","funding_links":[],"categories":["TypeScript","Others","Front-ends","Resources for Vue Storefront 2","vue","武器库"],"sub_categories":["Meet Magento","Official Resources - v2","前端"],"readme":"\u003cbr /\u003e\n\n![Alokai](https://res.cloudinary.com/vue-storefront/image/upload/v1710754524/Logo_green_2x_z4vmhz.png)\n\n\u003ch3 align=\"center\"\u003e\n  \u003cstrong\u003eAn ecosystem of developer tools that accelerate and simplify building eCommerce Storefronts\u003c/strong\u003e\n\u003c/h3\u003e\n\u003cp align=\"center\"\u003e\n    Fully customizable, backend-agnostic with     \u003ca href=\"https://alokai.com/live-projects/?utm_source=github.com\u0026utm_medium=referral\u0026utm_campaign=readme\"\u003e\n          3500+ Live Stores!\n    \u003c/a\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n     \u003ca href=\"https://docs.alokai.com/\"\u003e\n        Documentation\n    \u003c/a\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://github.com/vuestorefront/vue-storefront/\"\u003e\n    \u003cimg alt=\"GitHub Repository Stars Count\" src=\"https://img.shields.io/github/stars/vuestorefront/vue-storefront?style=social\" /\u003e\n  \u003c/a\u003e\n    \u003ca href=\"https://twitter.com/usealokai\"\u003e\n        \u003cimg alt=\"Follow Us on Twitter\" src=\"https://img.shields.io/twitter/follow/useAlokai?style=social\" /\u003e\n    \u003c/a\u003e\n    \u003ca href=\"https://www.youtube.com/c/VueStorefront\"\u003e\n        \u003cimg alt=\"Subscribe on our Youtube Channel\" src=\"https://img.shields.io/youtube/channel/subscribers/UCkm1F3Cglty3CE1QwKQUhhg?style=social\" /\u003e\n    \u003c/a\u003e\n    \u003ca href=\"https://discord.vuestorefront.io/\"\u003e\n        \u003cimg alt=\"Chat with us on Discord\" src=\"https://img.shields.io/discord/770285988244750366?label=join%20discord\u0026logo=Discord\u0026logoColor=white\" /\u003e\n    \u003c/a\u003e\n\u003c/p\u003e\n\u003cp align=\"center\"\u003e\n    \u003ca href=\"http://commitizen.github.io/cz-cli/\"\u003e\n        \u003cimg alt=\"Commitizen friendly\" src=\"https://img.shields.io/badge/commitizen-friendly-brightgreen.svg\" /\u003e\n    \u003c/a\u003e\n    \u003ca href=\"https://github.com/vuestorefront/vue-storefront\"\u003e\n        \u003cimg alt=\"License\" src=\"https://img.shields.io/github/license/vuestorefront/vue-storefront\" /\u003e\n    \u003c/a\u003e\n    \u003ca href=\"https://github.com/vuestorefront/vue-storefront/pulls\"\u003e\n        \u003cimg alt=\"PRs Welcome\" src=\"https://img.shields.io/badge/PRs-welcome-brightgreen.svg\" /\u003e\n    \u003c/a\u003e\n    \u003ca href=\"https://coveralls.io/github/vuestorefront/vue-storefront/?branch=next\"\u003e\n        \u003cimg alt=\"Coverage Status\" src=\"https://coveralls.io/repos/github/vuestorefront/vue-storefront/badge.svg?branch=next\" /\u003e\n    \u003c/a\u003e\n\u003c/p\u003e\n\n![Hero image](./_readme/HeroImage.png)\n\nAlokai is your guide to the composable commerce world that simplifies building, deploying, and monitoring ecommerce frontends.\n\n- **Works with any backend**. Alokai is compatible with any backend that has an API. In addition its already integrated with many of them! [See the list of available integrations](https://docs.vuestorefront.io/v2/integrations/#ecommerce-platforms).\n\n- **Working eCommerce Storefront** - Alokai delivers fully-working eCommerce storefront integrated with your favourite stack\n\n- **Fully customizable**. Build your application with pre-installed [Storefront UI](https://github.com/vuestorefront/storefront-ui) - components library designed for eCommerce, or build your own theme from scratch.\n\n## **What you get out-of-the-box** 📦\n\n\u003cp align=\"center\"\u003e\n  \u003cimg alt=\"Alokai Architecture\" src=\"./_readme/Ootb.png\"\u003e\n\u003c/p\u003e\n\n- **Nuxt.js** - the Vue.js framework used to build the application\n- **Next.js** - the React.js framework used to build the application\n- **Alokai Theme** - fully functional eCommerce theme based on the Storefront UI library\n- **Storefront UI** - the Vue.js UI components library used to build the frontend application\n- **Alokai Middleware** - the Express.js server used to connect the frontend application with the eCommerce platform and other Integrations\n\n## **Our Tech Stack** 🛠\n\n- [Vue.js](https://vuejs.org/)\n- [Nuxt.js](https://nuxtjs.org/)\n- [React.js](https://react.dev/)\n- [Next.js](https://nextjs.org/)\n- [TypeScript](https://www.typescriptlang.org/)\n- [Storefront UI](https://storefrontui.io/)\n- [Express.js](https://expressjs.com/)\n- [GraphQL](https://graphql.org/)\n- [Yarn](https://yarnpkg.com/)\n- [Docker](https://www.docker.com/)\n- [Jest](https://jestjs.io/)\n\n## **Contribution** 🤝\n\nAlokai is an Open Source project and we encourage everyone to help us making it better. If you are interested in contributing to the project, please read our [Contributing Guide](https://github.com/vuestorefront/.github/blob/main/CONTRIBUTING.md) and [Code of Conduct](https://github.com/vuestorefront/.github/blob/main//CODE_OF_CONDUCT.md).\n\nIf you have any questions about contributing, please join our [Discord server](https://discord.vuestorefront.io/) - we are happy to help you!\n\nDiscovered a 🐜 or have feature suggestion? Feel free to [create an issue](https://github.com/vuestorefront/vue-storefront/issues/new/choose) on Github.\n\n### **Follow us on Social Media**\n\n[![Twitter Follow](https://img.shields.io/twitter/follow/useAlokai?style=social)](https://twitter.com/useAlokai)\n[![YouTube Follow](https://img.shields.io/badge/YouTube-Follow-black?style=social\u0026logo=youtube)](https://www.youtube.com/c/useAlokai)\n[![Dev.to Follow](https://img.shields.io/badge/DEV.to-Follow-black?style=social\u0026logo=dev.to)](https://dev.to/vue-storefront)\n[![LinkedIn Follow](https://img.shields.io/badge/LinkedIn-Follow-black?style=social\u0026logo=linkedin)](https://www.linkedin.com/company/vue-storefront/)\n\n## **Careers** 👩‍💻👨‍💻\n\nWe are growing and we are looking for talented people to join our team. If you are interested in working with us, please check our [Careers page](https://vuestorefront.io/careers).\n\n## **#StandWithUkraine** 🇺🇦\n\nWe at Alokai express our support for the people of Ukraine and their right to live in a free and democratic country. We stand with Ukraine and we will continue to support the Ukrainian community.\n\n\u003ca href=\"https://supportukrainenow.org/\" target=\"_blank\"\u003e\n    \u003cimg src=\"https://images.spr.so/cdn-cgi/imagedelivery/j42No7y-dcokJuNgXeA0ig/0bad218e-829a-4547-8bee-a14be1ad783e/IMG_5243/w=3840,quality=80,fit=scale-down\" width=\"300px\" height=\"auto\" /\u003e\n\u003c/a\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvuestorefront%2Fvue-storefront","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fvuestorefront%2Fvue-storefront","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvuestorefront%2Fvue-storefront/lists"}