Stack census— back to the censusSurvey 015 · 06.10.2026

E-commerce · open source · awesome-selfhosted

Shopware Community Edition

shopware.com · answered as www.shopware.com · HTTP 200 in 4,956 ms

18 things were found in the response on 06.10.2026. This is the front door only: whatever runs behind a login, and anything a browser would have to execute to reveal, is not here.

What the page is built with

jQueryjavascript libraries
  • implied — implied by Shopware
Nuxt.jsjavascript frameworks · web frameworks · static site generator
  • script — /_nuxt/BcxAw_1M.js
  • html — <div id="__nuxt"
  • html — <script nonce="l7htlI0yYHFXZ2dF3EsyHA34">window.__NUXT__
PHPprogramming languages
  • implied — implied by Shopware
Symfonyweb frameworks
  • implied — implied by Shopware
Tailwind CSSui frameworks
  • css — stylesheet matches --tw-(?:rotate|translate|space-x|text-opacity|border-opacit…
Vue.jsjavascript frameworks
  • html — <div class="dropdown tw-absolute tw-top-full tw-left-0 tw-flex tw-flex-col tw-w-max tw-bg…

Where it is served from

  • header — content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; upgrade-insecure-requests; form-a…
  • implied — implied by Amazon S3
Nginxweb servers · reverse proxies
  • header — server: nginx

Where their email goes

Microsoft 365webmail · email
  • dns — MX 5 shopware-com.mail.protection.outlook.com

What is watching the visitor

  • header — content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; upgrade-insecure-requests; form-a…

How they take money

Shopwareecommerce
  • meta — <meta application-name="Shopware">

Where the words and pictures live

  • script — inline script matches \.ctfassets\.net
  • html — <link nonce="l7htlI0yYHFXZ2dF3EsyHA34" rel="preconnect" href="https://images.ctfassets.net
  • html — images.ctfassets.net

What stands at the door

HSTSsecurity
  • header — strict-transport-security: max-age=300
Usercentricscookie compliance
  • script — https://app.usercentrics.eu/browser-ui/latest/loader.js

Everything else

HTTP/3miscellaneous
  • header — alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
MySQLdatabases
  • implied — implied by Shopware
Varnishcaching
  • header — via: 1.1 varnish

Back to the census.