Svelte ecommerce - Headless, Authentication, Cart & Checkout, TailwindCSS, Server Rendered, Proxy + API Integrated

By Swadesh Behera
Last update: Jan 3, 2023
Comments: 14

Svelte Commerce?

Svelte Commerce is an advanced Frontend Platform for eCommerce based on Sveltekit

🛍️ Attach Svelte store front to any ecommerce API (e.g. Litekart, Magento, Moltin, Shopify ...)
👥 The demo uses litekart as backend
👨🏻‍💻 Its both SSR and SPA
🚀 Superfast
🔗 It is possible to connect with any eCommerce backend if the backend has Rest API
🔓 Svelte Commerce is free and open source. Download and modify it the way you want
🛒 Most of the essential features for ecommerce are already integrated
🕒 Save hours of development time setting up an ecommerce store front
💰 No need to make a big leap or invest huge amount. Just take this opend source project and attach to existing backend.
🐛 If you have discovered a bug or have feature suggestion, feel free to create/join a discussion on Github.
👍 I have been supporting this project alone since 2019. Any little code contribution will be appreciated
✨ Demo is hosted at netlify USA server and without CDN. Hence you may experience little lag.

Latest Updates

22-July-2021 - Integrated with netlify deployment
07-May-2021 - Completely Migrated to SvelteKit

Installation

Install - NodeJS - Yarn - Git

git clone https://github.com/itswadesh/svelte-commerce.git
cd svelte-commerce
yarn
yarn dev

Thats all !

Open http://localhost:3000 on chrome. Your app should be live with awesome sveltekit up and running

Configurations

If required change config/index.ts according to your requirement

Deployment

Click on the button to directly deploy to your netlify server. Zero configuration required.

Features

Awesome shiny new SvelteKit
Typescript for rock solid app
TailwindCSS Integrated
Server Rendered
Proxy + API integrated
Lazy loading images
Animations (Page transition)
Login
Cart & Checkout
Settings from database
Stores
SEO optimized pages
Carousel (Slider)
Toasts (Notifications)
Loading Indicators
Componentized Checkbox, Radio, Textbox
Instant Search
Faceted filters
API calls
Skeletons
Responsive

Contributing

If you like the ideas behind Svelte Commerce and want to become a contributor - join github discussions, check the list of the active issues or contact me directly via [email protected]

Support me!

Svelte Commerce is and always will be Open Source, released under MIT Licence.

You can support me in various ways:

Contribute - Support this project by contributing some ideas or directing digging into the source code and improving it.
Evangelize - Tweet about the project, take some speaking slot at a tech conference, etc.

Github

https://github.com/itswadesh/sapper-ecommerce

Comments(14)

1

Update README.md

Tiny little change to set off a build in vercel.. I think your project is really awesome, would you be williing to collaborate to make it accessible easily on https://vercel.com? I get this issue when I try to build the project there off master:

This is now-sapper, your Vercel builder. Turns out we couldn't find your server instance. Did you write module.exports = app?

Read the docs or create an issue: https://github.com/thgh/now-sapper

I think you already have a great project, but it you make it push button deployable, you may accelerate your progress exponentially. Let me know what you think, really great work dude!
2

[filtering page] APPLY button is not shown at the bottom of a screen on an Android phone
Describe the bug APPLY button is not shown at the bottom of a screen on an Android phone. I am talking about the "filtering" page.

To Reproduce Steps to reproduce the behavior:
1. Go to 'https://svelte-commerce.litekart.in/search' from your Android smartphone
2. Click on 'filter'
Expected behavior APPLY button is shown at the bottom of the screen

Screenshots

Smartphone (please complete the following information):
- Device: Android smartphone
- OS: Android 10
- Browser: Chrome
- Version: 96.0.4664.92
3

Bump undici from 5.1.1 to 5.5.1
Bumps undici from 5.1.1 to 5.5.1.
Release notes

Sourced from undici's releases.
v5.5.1

⚠️ v5.5.1 - Security release

This releases fixes CVE CVE-2022-32210. See https://github.com/nodejs/undici/security/advisories/GHSA-pgw7-wx7w-2w33 for more details:

Undici.ProxyAgent never verifies the remote server's certificate, and always exposes all request & response data to the proxy. This unexpectedly means that proxies can MitM all HTTPS traffic, and if the proxy's URL is HTTP then it also means that nominally HTTPS requests are actually sent via plain-text HTTP between Undici and the proxy server.

Full Changelog: https://github.com/nodejs/undici/compare/v5.5.0...v5.5.1

v5.5.0

What's Changed
- ci: skip automerge job if user is not dependabot by @Fdawgs in nodejs/undici#1478
- test: skip IPv6 tests if not supported by @LiviaMedeiros in nodejs/undici#1476
- ci: remove git credentials after checkout by @Fdawgs in nodejs/undici#1477
- fix(fetch): typo by @KhafraDev in nodejs/undici#1474
- fix: support TypedArray and DataView as Request body by @LiviaMedeiros in nodejs/undici#1472
- fix: connector types by @S222em in nodejs/undici#1362
- fix(tests): broken node-fetch tests by @KhafraDev in nodejs/undici#1486
- fix: readme example codestyle by @mainarthur in nodejs/undici#1488
- feat: implement FormData Iterator by @KhafraDev in nodejs/undici#1473
New Contributors
- @LiviaMedeiros made their first contribution in nodejs/undici#1476
- @S222em made their first contribution in nodejs/undici#1362
- @mainarthur made their first contribution in nodejs/undici#1488
Full Changelog: https://github.com/nodejs/undici/compare/v5.4.0...v5.5.0

v5.4.0

What's Changed
- fix: wait a macrotick to resume without pipelining by @mcollina in nodejs/undici#1465
- fix: import BodyReadable and Dispatcher correctly by @RA80533 in nodejs/undici#1424
- feat: add support for request params in mock client by @kibertoad in nodejs/undici#1466
- fix: ensure Blob and File type are included in FormData by @petebacondarwin in nodejs/undici#1467
- chore: Update busboy by @kibertoad in nodejs/undici#1468
- feat: remove headers filtering by @KhafraDev in nodejs/undici#1469
- build(deps-dev): bump https-pem from 2.0.0 to 3.0.0 by @dependabot in nodejs/undici#1471
- build(deps-dev): bump husky from 7.0.4 to 8.0.1 by @dependabot in nodejs/undici#1427
New Contributors
- @petebacondarwin made their first contribution in nodejs/undici#1467
Full Changelog: https://github.com/nodejs/undici/compare/v5.3.0...v5.4.0

v5.3.0

What's Changed
- feat: add myself as a collaborator by @KhafraDev in nodejs/undici#1435
- fix(fetch): remove brand checks from Symbol.toStringTag by @KhafraDev in nodejs/undici#1436
- fix(test/fetch): .call will always throw by @KhafraDev in nodejs/undici#1438
... (truncated)
Commits
- 19563f7 Bumped v5.5.1
- 6b42910 Fix support for Node v12
- 6fc7ffb test: add rejectUnauthorized for agent1 cert
- df4f7e0 Merge pull request from GHSA-pgw7-wx7w-2w33
- 2717d70 Bumped v5.5.0
- 3fa762e fix: update error messages
- a6cc7e4 feat: add FormData.prototype.forEach
- 282a52b feat: implement FormData Iterator
- 30a464b fix: moved async code in examples to top-level-await
- e00bd1d fix: readme example codestyle
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
4

Bump minimist from 1.2.5 to 1.2.6
Bumps minimist from 1.2.5 to 1.2.6.
Commits
- 7efb22a 1.2.6
- ef88b93 security notice for additional prototype pollution issue
- c2b9819 isConstructorOrProto adapted from PR
- bc8ecee test from prototype pollution PR
- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
5

Bump node-fetch from 2.6.1 to 3.1.1
Bumps node-fetch from 2.6.1 to 3.1.1.
Release notes

Sourced from node-fetch's releases.
v3.1.1

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed
- core: update fetch-blob by @jimmywarting in node-fetch/node-fetch#1371
- docs: Fix typo around sending a file by @jimmywarting in node-fetch/node-fetch#1381
- core: (http.request): Cast URL to string before sending it to NodeJS core by @jimmywarting in node-fetch/node-fetch#1378
- core: handle errors from the request body stream by @mdmitry01 in node-fetch/node-fetch#1392
- core: Better handle wrong redirect header in a response by @tasinet in node-fetch/node-fetch#1387
- core: Don't use buffer to make a blob by @jimmywarting in node-fetch/node-fetch#1402
- docs: update readme for TS @types/node-fetch by @adamellsworth in node-fetch/node-fetch#1405
- core: Fix logical operator priority to disallow GET/HEAD with non-empty body by @maxshirshin in node-fetch/node-fetch#1369
- core: Don't use global buffer by @jimmywarting in node-fetch/node-fetch#1422
- ci: fix main branch by @dnalborczyk in node-fetch/node-fetch#1429
- core: use more node: protocol imports by @dnalborczyk in node-fetch/node-fetch#1428
- core: Warn when using data by @jimmywarting in node-fetch/node-fetch#1421
- docs: Create SECURITY.md by @JamieSlome in node-fetch/node-fetch#1445
- core: don't forward secure headers to 3th party by @jimmywarting in node-fetch/node-fetch#1449
New Contributors
- @mdmitry01 made their first contribution in node-fetch/node-fetch#1392
- @tasinet made their first contribution in node-fetch/node-fetch#1387
- @adamellsworth made their first contribution in node-fetch/node-fetch#1405
- @maxshirshin made their first contribution in node-fetch/node-fetch#1369
- @JamieSlome made their first contribution in node-fetch/node-fetch#1445
Full Changelog: https://github.com/node-fetch/node-fetch/compare/v3.1.0...v3.1.1

v3.1.0

What's Changed
- fix(Body): Discourage form-data and buffer() by @jimmywarting in node-fetch/node-fetch#1212
- fix: Pass url string to http.request by @serverwentdown in node-fetch/node-fetch#1268
- Fix octocat image link by @lakuapik in node-fetch/node-fetch#1281
- fix(Body.body): Normalize Body.body into a node:stream by @jimmywarting in node-fetch/node-fetch#924
- docs(Headers): Add default Host request header to README.md file by @robertoaceves in node-fetch/node-fetch#1316
- Update CHANGELOG.md by @jimmywarting in node-fetch/node-fetch#1292
- Add highWaterMark to cloned properties by @davesidious in node-fetch/node-fetch#1162
- Update README.md to fix HTTPResponseError by @thedanfernandez in node-fetch/node-fetch#1135
- docs: switch url to URL by @dhritzkiv in node-fetch/node-fetch#1318
- fix(types): declare buffer() deprecated by @dnalborczyk in node-fetch/node-fetch#1345
- chore: fix lint by @dnalborczyk in node-fetch/node-fetch#1348
- refactor: use node: prefix for imports by @dnalborczyk in node-fetch/node-fetch#1346
- Bump data-uri-to-buffer from 3.0.1 to 4.0.0 by @dependabot in node-fetch/node-fetch#1319
- Bump mocha from 8.4.0 to 9.1.3 by @dependabot in node-fetch/node-fetch#1339
- Referrer and Referrer Policy by @tekwiz in node-fetch/node-fetch#1057
- Add typing for Response.redirect(url, status) by @c-w in node-fetch/node-fetch#1169
- chore: Correct stuff in README.md by @Jiralite in node-fetch/node-fetch#1361
- docs: Improve clarity of "Loading and configuring" by @serverwentdown in node-fetch/node-fetch#1323
- feat(Body): Added support for BodyMixin.formData() and constructing bodies with FormData by @jimmywarting in node-fetch/node-fetch#1314
... (truncated)
Changelog

Sourced from node-fetch's changelog.
Changelog

All notable changes will be recorded here.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

What's Changed
- core: update fetch-blob by @jimmywarting in node-fetch/node-fetch#1371
- docs: Fix typo around sending a file by @jimmywarting in node-fetch/node-fetch#1381
- core: (http.request): Cast URL to string before sending it to NodeJS core by @jimmywarting in node-fetch/node-fetch#1378
- core: handle errors from the request body stream by @mdmitry01 in node-fetch/node-fetch#1392
- core: Better handle wrong redirect header in a response by @tasinet in node-fetch/node-fetch#1387
- core: Don't use buffer to make a blob by @jimmywarting in node-fetch/node-fetch#1402
- docs: update readme for TS @types/node-fetch by @adamellsworth in node-fetch/node-fetch#1405
- core: Fix logical operator priority to disallow GET/HEAD with non-empty body by @maxshirshin in node-fetch/node-fetch#1369
- core: Don't use global buffer by @jimmywarting in node-fetch/node-fetch#1422
- ci: fix main branch by @dnalborczyk in node-fetch/node-fetch#1429
- core: use more node: protocol imports by @dnalborczyk in node-fetch/node-fetch#1428
- core: Warn when using data by @jimmywarting in node-fetch/node-fetch#1421
- docs: Create SECURITY.md by @JamieSlome in node-fetch/node-fetch#1445
- core: don't forward secure headers to 3th party by @jimmywarting in node-fetch/node-fetch#1449
New Contributors
- @mdmitry01 made their first contribution in node-fetch/node-fetch#1392
- @tasinet made their first contribution in node-fetch/node-fetch#1387
- @adamellsworth made their first contribution in node-fetch/node-fetch#1405
- @maxshirshin made their first contribution in node-fetch/node-fetch#1369
- @JamieSlome made their first contribution in node-fetch/node-fetch#1445
Full Changelog: https://github.com/node-fetch/node-fetch/compare/v3.1.0...v3.1.2

3.1.0

What's Changed
- fix(Body): Discourage form-data and buffer() by @jimmywarting in node-fetch/node-fetch#1212
- fix: Pass url string to http.request by @serverwentdown in node-fetch/node-fetch#1268
- Fix octocat image link by @lakuapik in node-fetch/node-fetch#1281
- fix(Body.body): Normalize Body.body into a node:stream by @jimmywarting in node-fetch/node-fetch#924
- docs(Headers): Add default Host request header to README.md file by @robertoaceves in node-fetch/node-fetch#1316
- Update CHANGELOG.md by @jimmywarting in node-fetch/node-fetch#1292
- Add highWaterMark to cloned properties by @davesidious in node-fetch/node-fetch#1162
- Update README.md to fix HTTPResponseError by @thedanfernandez in node-fetch/node-fetch#1135
- docs: switch url to URL by @dhritzkiv in node-fetch/node-fetch#1318
- fix(types): declare buffer() deprecated by @dnalborczyk in node-fetch/node-fetch#1345
- chore: fix lint by @dnalborczyk in node-fetch/node-fetch#1348
- refactor: use node: prefix for imports by @dnalborczyk in node-fetch/node-fetch#1346
- Bump data-uri-to-buffer from 3.0.1 to 4.0.0 by @dependabot in node-fetch/node-fetch#1319
- Bump mocha from 8.4.0 to 9.1.3 by @dependabot in node-fetch/node-fetch#1339
- Referrer and Referrer Policy by @tekwiz in node-fetch/node-fetch#1057
- Add typing for Response.redirect(url, status) by @c-w in node-fetch/node-fetch#1169
... (truncated)
Commits
- 36e47e8 3.1.1 release (#1451)
- 5304f3f Don't change relative location header on manual redirect (#1105)
- f5d3cf5 fix(Headers): don't forward secure headers to 3th party (#1449)
- f2c3d56 Create SECURITY.md (#1445)
- 4ae3538 core: Warn when using data (#1421)
- 41f53b9 fix: use more node: protocol imports (#1428)
- f674875 ci: fix main branch (#1429)
- 1493d04 core: Don't use global buffer (#1422)
- eb33090 Chore: Fix logical operator priority (regression) to disallow GET/HEAD with n...
- 7ba5bc9 update readme for TS @type/node-fetch (#1405)
- Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by endless, a new releaser for node-fetch since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
6

Bump nanoid from 3.1.25 to 3.2.0
Bumps nanoid from 3.1.25 to 3.2.0.
Changelog

Sourced from nanoid's changelog.
Change Log

This project adheres to Semantic Versioning.

3.2
- Added --size and --alphabet arguments to binary (by Vitaly Baev).
3.1.32
- Reduced async exports size (by Artyom Arutyunyan).
- Moved from Jest to uvu (by Vitaly Baev).
3.1.31
- Fixed collision vulnerability on object in size (by Artyom Arutyunyan).
3.1.30
- Reduced size for project with brotli compression (by Anton Khlynovskiy).
3.1.29
- Reduced npm package size.
3.1.28
- Reduced npm package size.
3.1.27
- Cleaned dependencies from development tools.
3.1.26
- Improved performance (by Eitan Har-Shoshanim).
- Reduced npm package size.
Commits
- 23b1369 Release 3.2 version
- 967788e Remove TS test tools
- 27eaa90 Simplify new binary tool
- a9d9123 Update dependencies
- 32b9bda Allows passing size or custom alphabet via cli as args (#334)
- 246d5f8 Update vite
- afdf9c9 doc: Fixed Typo (#335)
- 90a446f Update benchmark results
- 8ba2319 bench: add @napi-rs/uuid v4 (#333)
- f425778 Release 3.1.32 version
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
7

Bump shelljs from 0.8.4 to 0.8.5
Bumps shelljs from 0.8.4 to 0.8.5.

Release notes

Sourced from shelljs's releases.

v0.8.5

This was a small security fix for #1058.
Commits
- 70668a4 0.8.5
- d919d22 fix(exec): lockdown file permissions (#1060)
- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
8

Bump undici from 5.1.1 to 5.9.1
Bumps undici from 5.1.1 to 5.9.1.
Release notes

Sourced from undici's releases.
v5.9.1

What's Changed
- fix: don't timeout while waiting for client to send request (#1604)
- Fix array headers by @mateonunez in nodejs/undici#1598
- fix(fetch): implement fully read body algorithm by @KhafraDev in nodejs/undici#1597
- fix: add support for integrity option to Fetch by @jelmervdl in nodejs/undici#1596
- fix(File): respect typed array byteOffset and byteLength by @mrbbot in nodejs/undici#1601
New Contributors
- @mateonunez made their first contribution in nodejs/undici#1598
- @jelmervdl made their first contribution in nodejs/undici#1596
- @mrbbot made their first contribution in nodejs/undici#1601
Full Changelog: https://github.com/nodejs/undici/compare/v5.8.2...v5.9.1

v5.8.2

⚠️ Security Release ⚠️
- CRLF Injection in Nodejs ‘undici’ via Content-Type GHSA-f772-66g8-q5h3 CVE-2022-35948
- undici.request vulnerable to SSRF using absolute URL on pathname GHSA-8qr4-xgw6-wmr3 CVE-2022-35949
What's Changed
- docs: mock different endpoints in a single file by @ritvik130 in nodejs/undici#1589
- feat(webidl): better error message for ByteString converter by @KhafraDev in nodejs/undici#1591
New Contributors
- @ritvik130 made their first contribution in nodejs/undici#1589
Full Changelog: https://github.com/nodejs/undici/compare/v5.8.1...v5.8.2

v5.8.1

What's Changed
- Do not decode the body while we are following a redirect by @mcollina in nodejs/undici#1554
- docs: Fix spelling/grammar in "Mocking Request" by @meyfa in nodejs/undici#1555
- fix(MockInterceptor): callback options.headers w/ fetch by @KhafraDev in nodejs/undici#1559
- fix(fetch): ByteString checks & conversion in Headers by @KhafraDev in nodejs/undici#1560
- test: update client certificates with ones that expires in 100 years by @jodevsa in nodejs/undici#1566
- fix: x-www-form-urlencoded parser keep the BOM by @cola119 in nodejs/undici#1563
- fix: prioritise error events over timeouts by @jodevsa in nodejs/undici#1551
- fix: add isErrorLike by @KhafraDev in nodejs/undici#1570
- fix(types): add missing pool stats by @SkeLLLa in nodejs/undici#1573
- fix: fetch a long base64 url will crash and nothing happens (close: #1574) by @ahaoboy in nodejs/undici#1575
- fix: follow signal.reason in Request by @LiviaMedeiros in nodejs/undici#1580
- docs: Fix DiagnosticsChannel sidebar link by @trentm in nodejs/undici#1582
- fix: make mock headers case-insensitive by @cola119 in nodejs/undici#1585
New Contributors
- @meyfa made their first contribution in nodejs/undici#1555
- @cola119 made their first contribution in nodejs/undici#1563
- @SkeLLLa made their first contribution in nodejs/undici#1573
... (truncated)
Commits
- 5890e16 5.9.1
- ecae314 fix: don't timeout while waiting for client to send request (#1604)
- fa9fd90 fix(File): respect typed array byteOffset and byteLength (#1601)
- ae6f554 fix: add support for integrity option to Fetch (#1596)
- deed628 fix(fetch): implement fully read body algorithm (#1597)
- 0d1419c Fix array headers (#1598)
- 52d1ce5 Bumped v5.8.2
- 66165d6 Merge pull request from GHSA-f772-66g8-q5h3
- 124f7eb Merge pull request from GHSA-8qr4-xgw6-wmr3
- aef314c feat(webidl): better error message for ByteString converter (#1591)
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
9

Bump undici from 5.1.1 to 5.8.0
Bumps undici from 5.1.1 to 5.8.0.
Release notes

Sourced from undici's releases.
v5.8.0

⚠️ Security Fixes ⚠️
- CRLF injection in request path, method, and headers https://github.com/nodejs/undici/security/advisories/GHSA-3cvr-822r-rqcc, CVE CVE-2022-31150, reported by @Haxatron
- Cookies uncleared on cross-host / cross-origin redirect https://github.com/nodejs/undici/security/advisories/GHSA-q768-x9m6-m9qp, CVE CVE-2022-31150, reported by @Haxatron
What's Changed
- Drop PR title validation by @mcollina in nodejs/undici#1543
- chore: exclude windows node 16 by @mcollina in nodejs/undici#1542
- feat: use weighted round robin in balancedPool by @jodevsa in nodejs/undici#1069
- Fix up exclude in CI by @dominykas in nodejs/undici#1544
- fix(mock utils): set Readable.abort by @KhafraDev in nodejs/undici#1549
- fix(body mixin): only allow Uint8Array chunks by @KhafraDev in nodejs/undici#1550
- docs: updated proxy docs - renamed already used const proxy to proxyServer by @dancastillo in nodejs/undici#1552
New Contributors
- @jodevsa made their first contribution in nodejs/undici#1069
- @dancastillo made their first contribution in nodejs/undici#1552
Full Changelog: https://github.com/nodejs/undici/compare/v5.7.0...v5.7.1

v5.7.0

What's Changed
- fix(fetch): re-add support for node v16.8.0+ by @KhafraDev in nodejs/undici#1534
- fix(Headers): lowercase name in Headers.prototype.set by @KhafraDev in nodejs/undici#1535
- fix: allow optional body for mock reply by @JustinBeckwith in nodejs/undici#1536
- fix: faster direct read approach by @jimmywarting in nodejs/undici#1537
- feat: update to llhttp v6.0.7 by @mcollina in nodejs/undici#1539
New Contributors
- @jimmywarting made their first contribution in nodejs/undici#1537
Full Changelog: https://github.com/nodejs/undici/compare/v5.6.1...v5.7.0

v5.6.1

What's Changed
- docs: add example with HEAD method to garbage collection section by @mrkldshv in nodejs/undici#1522
- fix: improper handling of relative location header by @PrincessRavy in nodejs/undici#1523
- build(deps-dev): bump tsd from 0.21.0 to 0.22.0 by @dependabot in nodejs/undici#1530
- fix(fetch): do not assign default value to RequestInit.method by @KhafraDev in nodejs/undici#1529
New Contributors
- @mrkldshv made their first contribution in nodejs/undici#1522
- @PrincessRavy made their first contribution in nodejs/undici#1523
Full Changelog: https://github.com/nodejs/undici/compare/v5.6.0...v5.6.1

v5.6.0

What's Changed
- build(deps-dev): bump tsd from 0.20.0 to 0.21.0 by @dependabot in nodejs/undici#1493
... (truncated)
Commits
- 26f60b7 Bumped v5.8.0
- 0a5bee9 Merge pull request from GHSA-q768-x9m6-m9qp
- a29a151 Merge pull request from GHSA-3cvr-822r-rqcc
- 722976c docs: updated proxy docs - renamed already used const proxy to proxyServer (#...
- b6af4e6 fix(body mixin): only allow Uint8Array chunks (#1550)
- 6c9e634 fix(mock utils): set Readable.abort (#1549)
- 22e2f39 ci: fix up exclude (#1544)
- 99205ec feat: use weighted round robin in balancedPool (#1069)
- 5b57e8c chore: exclude windows node 16 (#1542)
- 93e31a2 Drop PR title validation (#1543)
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
10

Bump svelte from 3.48.0 to 3.49.0
Bumps svelte from 3.48.0 to 3.49.0.
Changelog

Sourced from svelte's changelog.
3.49.0
- Improve performance of string escaping during SSR (#5701)
- Add ComponentType and ComponentProps convenience types (#6770)
- Add support for CSS @layer (#7504)
- Export CompileOptions from svelte/compiler (#7658)
- Fix DOM-less components not being properly destroyed (#7488)
- Fix class: directive updates with <svelte:element> (#7521, #7571)
- Harden attribute escaping during SSR (#7530)
Commits
- 52153db -> v3.49.0
- 3798808 update changelog
- 0fa0a38 [fix] export CompileOptions (#7658)
- a3ecb44 update changelog
- 7e1691c [fix] support @layer (#7514)
- 4583b17 Update CHANGELOG.md
- 02f60fb [fix]destroy empty component (#7492)
- 31e5f8b [docs] "What's new in Svelte" July newsletter (#7637)
- 6f57571 [feat] add convenience types ComponentType and ComponentProps (#6770)
- 2f562d9 [docs] use npm create instead of npm init (#7641)
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
11

Bump ansi-regex from 5.0.0 to 5.0.1
Bumps ansi-regex from 5.0.0 to 5.0.1.
Release notes

Sourced from ansi-regex's releases.
v5.0.1

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in [email protected]<6.0.1, as requested in #38.
- Fix ReDoS in certain cases (#37) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.
CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @yetingli for the patch and reproduction case!
Commits
- a9babce 5.0.1
- 4657833 fix incorrect format
- c3c0b3f Fix potential ReDoS (#37)
- 178363b Move to GitHub Actions (#35)
- 0755e66 Add @Qix- to funding.yml
- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
12

Err at Hooks... TypeError: Cannot read properties of undefined (reading '_id')

Hey, thanks for the great project! And also happy to hire you for 20-30min to help me get it working locally and connecting to my REST API. My email [email protected] if interested. Thanks.

So, I cloned, npm install with 0 vulnerabilities and WARN derecated and then renamed to .env but didn't change there anything. When I npm run dev then all nice in console but when I open http://localhost:3000/ then I get 500 undefined in my browser and in console: https://i.imgur.com/6XIBxRG.png

I'm on Win 11 and Node v18.7.0
13

npm i (8.19.1) not able to run dev
Not able to run dev Not able to install dependencies fully on npm version 8.19.1

Errors which I have faced: npm ERR! syscall read npm ERR! errno -4077 npm ERR! network read ECONNRESET npm ERR! network This is a problem related to network connectivity. npm ERR! network In most cases you are behind a proxy or have bad network settings. npm ERR! network npm ERR! network 'proxy' config is set properly. See: 'npm help config' npm ERR! A complete log of this run can be found in: npm ERR!

I have tried
- npm i
- npm install vite
- npm config set fetch-retry-mintimeout 20000
- npm config set fetch-retry-maxtimeout 120000
How can I start using? Should I try going back to npm previous version? Any suggestion would be appreciated
14

How to run the project on local machine? DB migration and, etc.

Hi there, I want to run the project after clone but I have errors, it seems that backend API and DB migration didn't do. Could you please help me with how can I do this?

Svelte ecommerce - Headless, Authentication, Cart & Checkout, TailwindCSS, Server Rendered, Proxy + API Integrated

Svelte Commerce?

Svelte Commerce is an advanced Frontend Platform for eCommerce based on Sveltekit

Latest Updates

Installation

Configurations

Deployment

Features

Contributing

Support me!

Github

Comments(14)

Update README.md

[filtering page] APPLY button is not shown at the bottom of a screen on an Android phone

Bump undici from 5.1.1 to 5.5.1

v5.5.1

⚠️ v5.5.1 - Security release

v5.5.0

What's Changed

New Contributors

v5.4.0

What's Changed

New Contributors

v5.3.0

What's Changed

Bump minimist from 1.2.5 to 1.2.6

Bump node-fetch from 2.6.1 to 3.1.1

v3.1.1

Security patch release

What's Changed

New Contributors

v3.1.0

What's Changed

Changelog

What's Changed

New Contributors

3.1.0

What's Changed

Bump nanoid from 3.1.25 to 3.2.0

Change Log

3.2

3.1.32

3.1.31

3.1.30

3.1.29

3.1.28

3.1.27

3.1.26

Bump shelljs from 0.8.4 to 0.8.5

v0.8.5

Bump undici from 5.1.1 to 5.9.1

v5.9.1

What's Changed

New Contributors

v5.8.2

⚠️ Security Release ⚠️

What's Changed

New Contributors

v5.8.1

What's Changed

New Contributors

Bump undici from 5.1.1 to 5.8.0

v5.8.0

⚠️ Security Fixes ⚠️

What's Changed

New Contributors

v5.7.0

What's Changed

New Contributors

v5.6.1

What's Changed

New Contributors

v5.6.0

What's Changed

Bump svelte from 3.48.0 to 3.49.0

3.49.0

Bump ansi-regex from 5.0.0 to 5.0.1

v5.0.1

Fixes (backport of 6.0.1 to v5)

Err at Hooks... TypeError: Cannot read properties of undefined (reading '_id')

Fixes (backport of `6.0.1` to v5)