Starship
starship / search / cart-animator

Audit report

Cart Animator

Broad accessReach : broad

by Apps On Demand · Store design · Shopify App Store

Store design
Risk level
Broad access
Executive summary

Add interactive animation on add to cart button!

Key insights

  • ◆Cosmetic Add-to-Cart button animator app, minimal data exposure surface by design.
  • ◆Apparently unmaintained since 2018 launch; publisher site runs end-of-life PHP 7.3.
  • ◆Privacy policy and compliance posture could not be verified from public sources.
  • ◆No known CVEs, breaches, or security incidents publicly tied to publisher 'Apps On Demand' or this app.

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Add interactive animation on add to cart button!

Key insights
  • ◆Cosmetic Add-to-Cart button animator app, minimal data exposure surface by design.
  • ◆Apparently unmaintained since 2018 launch; publisher site runs end-of-life PHP 7.3.
  • ◆Privacy policy and compliance posture could not be verified from public sources.
  • ◆No known CVEs, breaches, or security incidents publicly tied to publisher 'Apps On Demand' or this app.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_themes
Low

L'app doit lire le thème pour identifier la page produit et le bouton d'ajout au panier, induit de la fonction déclarée de l'app.

write_themes
Medium

L'ajout d'animations interactives sur le bouton d'ajout au panier suppose une modification du thème, induit de la fonction déclarée de l'app.

write_script_tags
Medium

L'injection d'un script d'animation sur la page produit nécessite l'insertion de balises de script, induit de la fonction déclarée de l'app.

read_products
Low

La personnalisation sur la page produit implique la lecture des produits concernés, induit de la fonction déclarée de l'app.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
appsondemandtech.com
TLS grade
unknown
HSTS
Missing
CSP
Missing

Apache + PHP 7.3.33 (EOL since Dec 2021). No HSTS or CSP. Server returned HTTP 415 on HEAD probe.

Posture

Compliance & certifications

GDPR webhooks Fail
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

Privacy policy host referenced on Shopify listing did not surface a reachable policy document during audit.

Privacy policy
Track record

Publisher reputation

Publisher
Apps On Demand
Verified Shopify Partner
No
Years active
8
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.