# hyva-themes/magento2-default-theme-csp

> Default Hyvä Theme (CSP compatible)

`composer require hyva-themes/magento2-default-theme-csp`

Canonical URL: https://packagento.com/hyva-themes/magento2-default-theme-csp

## At a glance

- **Vendor**: hyva-themes (https://packagento.com/hyva-themes.md)
- **Latest version**: 1.4.6 — released 2026-05-12
- **Pricing**: Free
- **Package type**: Magento 2 theme
- **Status**: active, accepting new buyers

## Installation

Packagento is licence-gated, so even free packages need a licence on a project before Composer can resolve them.

1. **Sign in or create an account** at https://packagento.com/customer/account/.

2. **Add the package to your account.** Open https://packagento.com/hyva-themes/magento2-default-theme-csp and complete the free checkout. A licence is minted automatically.

3. **Create or pick a project, then activate the licence on it.**
   - Projects represent the Magento installs you deploy to. Manage them at https://packagento.com/projects/.
   - Activate the new licence on the project you'll deploy this package to. Activation is what generates the Composer credentials scoped to that project.

4. **Add the project credentials to your Magento codebase.**

   Grab the project's public + private key from https://packagento.com/projects/ (open the project, then its Credentials tab), and add them to `auth.json`:

   ```json
   {
     "http-basic": {
       "packagento.com": {
         "username": "ppk_live_...",
         "password": "psk_live_..."
       }
     }
   }
   ```

   Add the Packagento Composer repository to `composer.json`:

   ```json
   {
     "repositories": [
       { "type": "composer", "url": "https://packagento.com" }
     ]
   }
   ```

5. **Install and apply.**

   ```bash
   composer require hyva-themes/magento2-default-theme-csp:*
   bin/magento setup:upgrade
   bin/magento setup:di:compile
   bin/magento cache:flush
   ```

## What it does

Default Hyvä Theme (CSP compatible)

## README

[![Hyvä Themes](https://hyva.io/media/wysiwyg/logo-compact.png)](https://hyva.io/)

### hyva-themes/magento2-default-theme-csp

This is a CSP compatible version default Hyvä Theme package hyva-themes/magento2-default-theme for Magento 2, including layout and styling assets used as the base for custom Magento storefronts.

![Supported Magento Versions][ico-compatibility]

Compatible with Magento 2.4.4-p9 and higher.
 
### Hyvä Theme Installation

Installing Hyvä Theme requires several steps outlined below.

#### Step 1: Configure composer repositories

The recommended way to install Hyvä Theme is with a Hyvä Private Packagist key. This will make many compatibility modules also available.
Alternatively, Hyvä Theme can be installed from GitHub.

Choose one of the following options:


##### Option 1: Installation from Hyvä Private Packagist (Recommended)

To install from the Hyvä Private Packagist repo, first get a key by registering an account at [www.hyva.io](https://www.hyva.io) and creating one from your account dashboard.

You will receive instructions like the following after creating the key:

```sh
## this command adds your key to your project's auth.json file
## replace yourLicenseAuthenticationKey with your own key
composer config --auth http-basic.hyva-themes.repo.packagist.com token yourLicenseAuthenticationKey
## replace yourProjectName with your project name
composer config repositories.private-packagist composer https://hyva-themes.repo.packagist.com/yourProjectName/
```

##### Option 2: Installation from GitHub

To install Hyvä directly from GitHub, configure all required GitHub repositories as composer repositories.

```sh
composer config repositories.hyva-themes/magento2-theme-module git https://github.com/hyva-themes/magento2-theme-module.git
composer config repositories.hyva-themes/magento2-default-theme git https://github.com/hyva-themes/magento2-default-theme.git
composer config repositories.hyva-themes/magento2-default-theme-csp git https://github.com/hyva-themes/magento2-default-theme-csp.git
composer config repositories.hyva-themes/magento2-base-layout-reset git https://github.com/hyva-themes/magento2-base-layout-reset.git
composer config repositories.hyva-themes/magento2-compat-module-fallback git https://github.com/hyva-themes/magento2-compat-module-fallback.git
composer config repositories.hyva-themes/magento2-mollie-theme-bundle git https://github.com/hyva-themes/magento2-mollie-theme-bundle.git
composer config repositories.hyva-themes/magento2-luma-checkout git https://github.com/hyva-themes/magento2-luma-checkout.git
composer config repositories.hyva-themes/magento2-theme-fallback git https://github.com/hyva-themes/magento2-theme-fallback.git
composer config repositories.hyva-themes/magento2-order-cancellation-webapi git https://github.com/hyva-themes/magento2-order-cancellation-webapi.git
composer config repositories.hyva-themes/magento2-email-module git https://github.com/hyva-themes/magento2-email-module.git
```


#### Step 2: Install the Hyvä Theme Package

Install the theme and its dependencies with composer:

```sh
composer require hyva-themes/magento2-default-theme-csp
```

#### Step 3: Post Install Actions

- After installing the Hyvä Theme package, run the Magento setup command:

  ```sh
  bin/magento setup:upgrade
  ```

- Configure the theme in the Magento admin.
  Navigate to the `Content > Design > Configuration` admin section and activate the hyva/default theme.

- Follow the additional steps according to the Hyvä Themes [Getting Started](https://docs.hyva.io/hyva-themes/getting-started/index.html#getting-started) documentation.

### Support / Docs

- Documentation: [https://docs.hyva.io](https://docs.hyva.io)
- Account and downloads: [https://www.hyva.io](https://www.hyva.io)

### License

This package is dual-licensed under the **Open Software License (OSL 3.0)** and the **Academic Free Software License (AFL 3.0)**. You may choose either license.

- **Copyright:** Copyright © 2020-present Hyvä Themes. All rights reserved.
- **OSL 3.0 text:** `LICENSE.txt` or [http://opensource.org/licenses/osl-3.0.php](http://opensource.org/licenses/osl-3.0.php).
- **AFL 3.0 text:** `LICENSE_AFL.txt` or [http://opensource.org/licenses/afl-3.0.php](http://opensource.org/licenses/afl-3.0.php).

#### Additional Licenses for Included Assets

- **Magento code:** Includes software from Magento, Inc. (https://github.com/magento/magento2) under the AFL 3.0. Source is available at https://github.com/magento/magento2.
- **Third-party libraries:** Includes Nick Piscitelli libraries (https://github.com/NickPiscitelli/) under the MIT license. License text: [https://opensource.org/license/MIT](https://opensource.org/license/MIT).

### Changelog
Please see [The Changelog](CHANGELOG.md).

[ico-compatibility]: https://img.shields.io/badge/magento-%202.4-brightgreen.svg?logo=magento&longCache=true&style=flat-square

## Changelog

All notable changes to this project will be documented in this file.

The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/).

### [Unreleased]

[Unreleased]: https://gitlab.hyva.io/hyva-themes/magento2-default-theme-csp/-/compare/1.4.6...main

### [1.4.6 CSP] - 2026-05-12

[1.4.6 CSP]: https://gitlab.hyva.io/hyva-themes/magento2-default-theme-csp/-/compare/1.4.5...1.4.6

Same as default theme

### [1.4.6] - 2026-05-12

[1.4.6]: https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/compare/1.4.5...1.4.6

#### Added

-   Nothing Added

#### Changed

-   Nothing Changed

#### Removed

-   Nothing Removed

### [1.4.5 CSP] - 2026-03-16

[1.4.5 CSP]: https://gitlab.hyva.io/hyva-themes/magento2-default-theme-csp/-/compare/1.4.4...1.4.5

Same as default theme

### [1.4.5] - 2026-03-16

[1.4.5]: https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/compare/1.4.4...1.4.5

#### Added

-   Nothing Added

#### Changed

-   **Fix missing imageHelper for the gallery preload**  
    For more information, please refer to [issue #1297](https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/issues/1297).

-   **Make Page Builder tabs widget compliant with ARIA tabs pattern**  
    For more information, please refer to [issue #1299](https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/issues/1299).

-   **Fix issue with related product for configured product in wishlist**  
    For more information, please refer to [issue #1169](https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/issues/1169).

    Many thanks to Nataliia Bratchykova (Perspective) for the contribution!

#### Removed

-   Nothing Removed

### [1.4.4 CSP] - 2026-03-03

[1.4.4 CSP]: https://gitlab.hyva.io/hyva-themes/magento2-default-theme-csp/-/compare/1.4.3...1.4.4

#### Added

-   Nothing added

#### Changed

-   **Fix ShippingCarrierRateIncl being render on the cart page as text**  
    For more information, please refer to [issue #33](https://gitlab.hyva.io/hyva-themes/magento2-default-theme-csp/-/issues/33).

#### Removed

-   Nothing removed

### [1.4.4] - 2026-03-03

[1.4.4]: https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/compare/1.4.3...1.4.4

#### Added

-   **Add availability and priceValidUntil for product rich snippet**  
    For more information, please refer to [issue #680](https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/issues/680).

    Many thanks to Vita Samohina (Perspective) for the contribution!

-   **Add reCAPTCHA Legal Notice option to customize**  
    For more information, please refer to [issue #1295](https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/issues/1295).

#### Changed

-   **Fix missing support for legacy opacity modifier for the Hyvä checkout with Tailwind 4**  
    For more information, please refer to [issue #1279](https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/issues/1279).

-   **Fix wrong icon in cart page sidebar for shipping and tax**  
    For more information, please refer to [issue #1283](https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/issues/1283).

-   **Fix alignment in pagebuilder product slider if only the dots are enabled**  
    For more information, please refer to [merge request #1440](https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/merge_requests/1440).

-   **Fix layout shift on PDP caused by preformatted span**  
    For more information, please refer to [merge request #1436](https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/merge_requests/1436).

    Many thanks to Finn Reinhardt (Basecom) for the contribution!

-   **Fix missing styling for buttons in user forms**  
    For more information, please refer to [issue #1271](https://gitlab.hyva.io/hyva-themes/magento2-default-theme/-/issues/1271).

    Many thanks to Viktor Yakaba (Perspective) for the contribution!

_(Changelog truncated for .md surface. Full history on https://packagento.com/hyva-themes/magento2-default-theme-csp.)_

## Recent Versions

| Version | Released |
|---|---|
| 1.4.6 | 2026-05-12 |
| 1.4.5 | 2026-03-16 |
| 1.3.22 | 2026-03-16 |
| 1.4.4 | 2026-03-03 |
| 1.4.3 | 2026-01-09 |
| 1.3.21 | 2026-01-08 |
| 1.4.2 | 2025-12-10 |
| 1.4.1 | 2025-11-18 |
| 1.4.0 | 2025-11-10 |
| 1.3.20 | 2025-11-04 |

Showing 10 of 77 versions. Full release history on https://packagento.com/hyva-themes/magento2-default-theme-csp.

## Dependencies

### Require

| Package | Constraint |
|---|---|
| hyva-themes/magento2-base-layout-reset | ^2.0.1 |
| hyva-themes/magento2-email-module | * |
| hyva-themes/magento2-graphql-tokens | * |
| hyva-themes/magento2-graphql-view-model | >=1.0.1 |
| hyva-themes/magento2-order-cancellation-webapi | ^1.0.0 |
| hyva-themes/magento2-theme-module | >=1.4.6 |
| magento/framework | >=102.0.0 |
| magento/module-catalog-rule-graph-ql | * |
| magento/module-customer-graph-ql | * |
| magento/module-directory-graph-ql | * |
| magento/module-graph-ql | * |
| magento/module-quote-graph-ql | * |
| php | >=7.3.0 |

### Require (dev)

| Package | Constraint |
|---|---|
| dealerdirect/phpcodesniffer-composer-installer | dev-master |
| magento/magento-coding-standard | dev-master |
| phpro/grumphp | dev-master |

## Quality

Latest release (1.4.6) passes the Packagento QA pipeline. Verdicts below are per-cell (Magento line × PHP version) for the matrixed tools, and run-once for the static / security tiers.


### Compatibility

Each Magento line is installed on its supported PHP versions, then the module is built (DI compile + static-content deploy). Cells show passed / failed / untested; staircase gaps render as `–`.

| Magento | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|
| 2.4.7 | not tested | not tested | – | – |
| 2.4.8 | – | not tested | not tested | – |
| 2.4.9 | – | – | not tested | not tested |


### Code Quality

Advisory checks against the module's source. Never affect the Compatibility verdict — a phpcs finding can't make a module incompatible.

#### Static Analysis

Coding standards (phpcs), mess detection (phpmd), copy-pasted code (cpd), PHP cross-version compatibility, composer.json validity. Each runs once for the whole module.

| Tool | Status | Findings | Summary |
|---|---|---|---|
| PHPCS | Warning | 299 | 299 warnings (ruleset: Magento2) — 1 auto-fixable with phpcbf |
| PHPMD | Pass | 0 |  |
| Cpd | Pass | 0 |  |
| Composer validate | Info | 10 | valid; 10 advisory notes (composer validate --strict) |

#### PHPStan

Type-checks the module against a real Magento install. Re-runs per Magento + PHP version because resolvable symbols differ between releases.

| Magento | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|
| 2.4.7 | Error | Error | – | – |
| 2.4.8 | – | Error | Error | – |
| 2.4.9 | – | – | Error | Error |


### Tests

Unit and integration suites run per Magento + PHP cell. Test failures speak to the module's behaviour, not its compatibility with a line, so they're reported here separately.

#### Unit Tests

| Magento | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|
| 2.4.7 | N/A | N/A | – | – |
| 2.4.8 | – | N/A | N/A | – |
| 2.4.9 | – | – | N/A | N/A |

#### Integration Tests

| Magento | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|
| 2.4.7 | N/A | N/A | – | – |
| 2.4.8 | – | N/A | N/A | – |
| 2.4.9 | – | – | N/A | N/A |


### Security

Dependency-advisory audit (composer audit) plus a source malware scan. A malware detection fails the version outright.

| Tool | Status | Findings | Summary |
|---|---|---|---|
| Composer audit | N/A | 0 | no resolvable dependency tree to audit — Your requirements could not be resolved to an installable set of packages. Problem 1 |
| Malware scan | Pass | 0 |  |

## Licence and pricing

Free. A licence is still minted on checkout and bound to your project for Composer access — no payment step.

Refundable within 14 days of first purchase via https://packagento.com/account/refunds/.

## Install via Claude Code or any MCP client

The Packagento MCP server can run the licence + project + Composer steps above in one tool call:

```
purchase_and_install_packages(
  composer_names=["hyva-themes/magento2-default-theme-csp"],
  project_id="proj_xxx"
)
```

This handles cart, checkout, licence minting, project activation, and writes auth.json credentials. Connect a client with `claude mcp add packagento https://mcp.packagento.com`. Full setup at https://packagento.com/docs/mcp-setup.

## Vendor

hyva-themes is a Magento 2 vendor on Packagento. See https://packagento.com/hyva-themes.md for their full catalogue.