Page 9 - Monthly Archives: February 2025

Deque Systems' axe-core has long stopped being a single tool. It is the shared testing engine behind axe DevTools, Lighthouse, jest-axe, cypress-axe and a long list of other testing tools, all running the same rules against the same DOM. Treating axe-core as a CI-only concern throws away its biggest advantage: catching barriers in seconds, right at a developer's own desk, long before a commit even exists. This article covers using axe-core in Storybook, in local development and through the browser extension every day, and where automated detection genuinely stops.

Company Credit Limits let company customers order against an invoice up to a defined balance, with its own history, its own checkout validation, and a connection to the Payment on Account method. Building a custom approval workflow for overruns means understanding exactly how and when Magento actually calculates and reserves the available balance.

Magento's standard dashboard shows revenue, bestsellers, and returning customers, but there's no ready-made tile for business KPIs like stock alerts or open RMA requests. Understanding the dashboard architecture, data aggregation, and a clean caching strategy lets you build custom widgets that don't hit the full database on every single dashboard load, even at scale.

Choosing the right authentication mechanism decides the security and integration effort of a PHP API. This article shows when API keys are enough, how JWT signatures really work, and when the extra effort of OAuth2 truly pays off, with secure storage and full code examples.

Nuxt Image abstracts image optimization behind a single component API, but leaves open which provider actually performs the transformation: the built-in IPX provider processes images directly on your own server, while Cloudinary and imgix, as external CDN services, offload that work and bring their own cost and scaling models along with it. Which provider fits best depends less on raw image quality than on traffic volume, how globally distributed your users are, and the infrastructure you already have in place.

Service Contracts, Data Interfaces, SearchCriteriaBuilder and REST API: build custom repositories that guarantee stable APIs across upgrades.

A Hyvä update that suddenly changes the structure of the mini-cart component hits projects especially hard when the core has been copied directly in several places instead of overridden through the fallback system. This article shows how to reliably spot breaking changes in Hyvä releases, why the fallback principle structurally separates custom code from parent updates, and what testing strategy actually provides safety before a Hyvä major update.

Hyvä's default search box only jumps to the results page once you press Enter, showing no suggestions while you type. Live Search autocomplete in the Hyvä header closes exactly that gap: a GraphQL suggestion query returns products, categories, and prices, a lean Alpine.js component handles debouncing, request cancellation, and keyboard navigation, and CSP-compliant rendering keeps the shop safe and fast at the same time.

Vulnerabilities in production dependencies tend to get taken seriously, while test and dev dependencies like PHPUnit plugins or coverage tools are often ignored. Yet exactly these packages run with full privileges in the CI/CD pipeline and form a real entry point for supply chain attacks, one composer audit can uncover deliberately.

An unencrypted SQLite database on a device can be read in plain text with a file manager or rooted access. SQLCipher closes that gap by transparently encrypting the entire database file without changing the familiar SQL interface. This article covers how it works, key management, and the realistic performance cost.