No description
Find a file
Brendon Heinst 6b2187de2a Security hardening for production deployment
- Remove secrets from Dockerfile build args, pass as runtime env vars only
- Add non-root user to Docker container
- Add SKU format validation to prevent S3 key injection
- Sanitize error responses in sanity-lookup route
- Fix zod import to use @medusajs/framework/zod
- Clean up .env.template defaults and .dockerignore
2026-02-24 17:19:13 +01:00
.vscode Initial commit 2026-02-24 15:06:43 +01:00
integration-tests Initial commit 2026-02-24 15:06:43 +01:00
src Security hardening for production deployment 2026-02-24 17:19:13 +01:00
.dockerignore Security hardening for production deployment 2026-02-24 17:19:13 +01:00
.env.template Security hardening for production deployment 2026-02-24 17:19:13 +01:00
.env.test Initial commit 2026-02-24 15:06:43 +01:00
.gitignore Initial commit 2026-02-24 15:06:43 +01:00
.npmrc Initial commit 2026-02-24 15:06:43 +01:00
.yarnrc.yml Initial commit 2026-02-24 15:06:43 +01:00
CLAUDE.md Initial commit 2026-02-24 15:06:43 +01:00
Dockerfile Security hardening for production deployment 2026-02-24 17:19:13 +01:00
instrumentation.ts Initial commit 2026-02-24 15:06:43 +01:00
jest.config.js Initial commit 2026-02-24 15:06:43 +01:00
medusa-config.ts Add Redis to medusa-config.ts 2026-02-24 16:22:37 +01:00
package-lock.json Initial commit 2026-02-24 15:06:43 +01:00
package.json Initial commit 2026-02-24 15:06:43 +01:00
README.md Initial commit 2026-02-24 15:06:43 +01:00
start.sh Add Sanity seed migration to deploy scripts 2026-02-24 16:55:35 +01:00
trptk-pricing.json Initial commit 2026-02-24 15:06:43 +01:00
tsconfig.json Initial commit 2026-02-24 15:06:43 +01:00

Medusa logo

Medusa

Documentation | Website

Building blocks for digital commerce

PRs welcome! Product Hunt Discord Chat Follow @medusajs

Compatibility

This starter is compatible with versions >= 2 of @medusajs/medusa.

Getting Started

Visit the Quickstart Guide to set up a server.

Visit the Docs to learn more about our system requirements.

What is Medusa

Medusa is a set of commerce modules and tools that allow you to build rich, reliable, and performant commerce applications without reinventing core commerce logic. The modules can be customized and used to build advanced ecommerce stores, marketplaces, or any product that needs foundational commerce primitives. All modules are open-source and freely available on npm.

Learn more about Medusas architecture and commerce modules in the Docs.

Build with AI Agents

Claude Code Plugin

If you use AI agents like Claude Code, check out the medusa-dev Claude Code plugin.

Other Agents

If you use AI agents other than Claude Code, copy the skills directory into your agent's relevant skills directory.

MCP Server

You can also add the MCP server https://docs.medusajs.com/mcp to your AI agents to answer questions related to Medusa. The medusa-dev Claude Code plugin includes this MCP server by default.

Community & Contributions

The community and core team are available in GitHub Discussions, where you can ask for support, discuss roadmap, and share ideas.

Join our Discord server to meet other community members.

Other channels