faststore-storefront
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyreferences/graphql-types-queries-and-mutations.md
LOWAnomalyLOW
references/graphql-types-queries-and-mutations.md
The fragment is mostly legitimate FastStore GraphQL extension documentation and does not show clear malware or intentional supply-chain sabotage. The contact-form example is security-sensitive because it forwards user personal data to a hardcoded playground tenant and exposes caught errors; it should use validated store-specific configuration, appropriate authentication and abuse controls, and generic error responses. The installment examples also contain null-handling bugs that can cause runtime failures. Review and remediation are recommended before production use.
Confidence: 95%Severity: 68%
Audit Metadata