@unchainedshop/plugins

January 20, 2026 ยท View on GitHub

npm version License: EUPL-1.2

@unchainedshop/plugins

Official plugin collection for the Unchained Engine. Provides ready-to-use adapters for payment, delivery, pricing, file storage, workers, and more.

Installation

npm install @unchainedshop/plugins

Available Plugins

Payment Adapters

PluginImport PathDescription
Invoicepayment/invoiceSimple invoice-based payment
Invoice Prepaidpayment/invoice-prepaidPrepaid invoice payment
Stripepayment/stripeStripe payment integration
Datatrans V2payment/datatrans-v2Datatrans payment gateway
Saferpaypayment/saferpaySaferpay payment gateway
Braintreepayment/braintreeBraintree payments
Payrexxpayment/payrexxPayrexx payment gateway
Apple IAPpayment/apple-iapApple In-App Purchase
Cryptopaypayment/cryptopayCryptocurrency payments

Delivery Adapters

PluginImport PathDescription
Postdelivery/postStandard postal delivery
Storesdelivery/storesStore pickup delivery
Send Messagedelivery/send-messageDigital delivery via messaging

Pricing Adapters

PluginImport PathDescription
Product Catalog Pricepricing/product-catalog-priceBase catalog pricing
Product Price Rate Conversionpricing/product-price-rateconversionCurrency conversion
Product Roundpricing/product-roundPrice rounding
Product Discountpricing/product-discountProduct-level discounts
Order Itemspricing/order-itemsOrder item pricing
Order Deliverypricing/order-deliveryDelivery pricing
Order Paymentpricing/order-paymentPayment fee pricing
Order Discountpricing/order-discountOrder-level discounts
Order Roundpricing/order-roundOrder total rounding
Free Deliverypricing/free-deliveryFree delivery conditions
Free Paymentpricing/free-paymentFree payment processing
Swiss Tax (CH)pricing/tax/chSwiss VAT calculation

Filter Adapters

PluginImport PathDescription
Strict Equalfilters/strict-equalExact match filtering
Local Searchfilters/local-searchFull-text search

File Storage Adapters

PluginImport PathDescription
GridFSfiles/gridfsMongoDB GridFS storage
MinIOfiles/minioMinIO/S3-compatible storage

Worker Adapters

PluginImport PathDescription
Emailworker/emailEmail sending worker
Heartbeatworker/heartbeatKeep-alive heartbeat
HTTP Requestworker/http-requestHTTP request worker
Bulk Importworker/bulk-importBulk data import
Externalworker/externalExternal service calls
Twilioworker/twilioTwilio SMS integration
Push Notificationworker/push-notificationPush notifications
Update ECB Ratesworker/update-ecb-ratesECB exchange rates
Update Coinbase Ratesworker/update-coinbase-ratesCrypto exchange rates
Update Token Ownershipworker/update-token-ownershipNFT ownership sync
Zombie Killerworker/zombie-killerStale job cleanup
Error Notificationsworker/error-notificationsError alerting

Event Adapters

PluginImport PathDescription
Node Event Emitterevents/node-event-emitterDefault Node.js emitter
Redisevents/redisRedis pub/sub
AWS EventBridgeevents/aws-eventbridgeAWS EventBridge

Warehousing Adapters

PluginImport PathDescription
Storewarehousing/storeBasic inventory
ETH Minterwarehousing/eth-minterEthereum NFT minting

Other Adapters

PluginImport PathDescription
Licensed Enrollmentenrollments/licensedLicense-based subscriptions
Manual Quotationquotations/manualManual quote handling

Usage

Import and register plugins during platform initialization:

import { startPlatform } from '@unchainedshop/platform';

// Import specific plugins
import '@unchainedshop/plugins/payment/stripe';
import '@unchainedshop/plugins/delivery/post';
import '@unchainedshop/plugins/pricing/product-catalog-price';

const platform = await startPlatform({
  // ...
});

Security

Payment Plugin Security

All payment plugins implement secure tokenization patterns for PCI DSS SAQ-A eligibility:

PluginSecurity Method
StripePaymentIntent/SetupIntent tokenization
DatatransSecure Fields with HMAC-SHA-256 signatures
SaferpayRedirect with SHA-256 transaction signatures
BraintreeClient SDK tokenization
CryptopayBIP-32 HD wallet address derivation

Signature Algorithms:

  • HMAC-SHA-256: Datatrans, Payrexx, GridFS file uploads
  • HMAC-SHA-512: PostFinance Checkout
  • SHA-256: Saferpay

FIPS 140-3 Compatibility

All cryptographic operations use FIPS-approved algorithms. When deployed on FIPS-enabled Node.js (e.g., Chainguard node-fips), plugins operate in FIPS-compliant mode.

See SECURITY.md for complete security documentation.

Notes

Postfinance Checkout Plugin

Due to a TypeScript issue with the upstream "postfinancecheckout" package, the Postfinance plugin has been disabled from transpilation. To use it:

  1. Import the source TypeScript files directly from src
  2. Enable node_modules TypeScript compilation, or
  3. Copy src/payment/postfinance-checkout to your project

License

EUPL-1.2