# shipperhq/module-shipper 20.61.7

> Version 20.61.7 of shipperhq/module-shipper, released 2026-07-09.

`composer require shipperhq/module-shipper:20.61.7`

Canonical URL: https://packagento.com/shipperhq/module-shipper/20.61.7

## At a glance

- **Released**: 2026-07-09
- **Magento**: >=103.0
- **QA**: failing

## What it does

Magento Shipping integration with ShipperHQ

## Dependencies

### Require

| Package | Constraint |
|---|---|
| lcobucci/jwt | ^4.0 |
| magento/framework | >=103.0 |
| magento/module-store | >=100.2 |
| shipperhq/library-graphql | ^20.4.0 |
| shipperhq/library-shipper | ^20.17 |
| shipperhq/library-ws | ^20.7.0 |
| shipperhq/module-common | ^20.10.0 |
| shipperhq/module-logger | * |

### Require (dev)

| Package | Constraint |
|---|---|
| fooman/magento2-phpunit-bridge | ^0.9.0 |
| friendsofphp/php-cs-fixer | ~2.1.1 |
| jakub-onderka/php-console-highlighter | ^0.3.2 |
| jakub-onderka/php-parallel-lint | ^0.9.2 |
| lusitanian/oauth | ~0.8.10 |
| magento-ecg/coding-standard | ^3.1 |
| mikey179/vfsstream | ^1.6 |
| pdepend/pdepend | ^2.5 |
| phploc/phploc | ^4.0 |
| phpmd/phpmd | @stable |
| phpro/grumphp | ^0.12.1 |
| phpunit/phpunit | ~5.3.0 |
| sebastian/phpcpd | 2.0.4 |
| squizlabs/php_codesniffer | ^3.2 |
| symfony/dependency-injection | >3.4.26 |
| symfony/proxy-manager-bridge | >3.4.26 |
| theseer/phpdox | ^0.10.1 |

## Quality

Version 20.61.7 fails the Packagento QA pipeline. Verdicts below are per-cell (Magento line × PHP version) for the matrixed tools, and run-once for the static / security tiers.


### Compatibility

Each Magento line is installed on its supported PHP versions, then the module is built (DI compile + static-content deploy). Cells show passed / failed / untested; staircase gaps render as `–`.

| Magento | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|
| 2.4.7 | Pass | Pass | – | – |
| 2.4.8 | – | Pass | Pass | – |
| 2.4.9 | – | – | Pass | Pass |


### Code Quality

Advisory checks against the module's source. Never affect the Compatibility verdict — a phpcs finding can't make a module incompatible.

#### Static Analysis

Coding standards (phpcs), mess detection (phpmd), copy-pasted code (cpd), PHP cross-version compatibility, composer.json validity. Each runs once for the whole module.

| Tool | Status | Findings | Summary |
|---|---|---|---|
| PHPCS | Warning | 351 | 351 warnings (ruleset: Magento2), 12 auto-fixable with phpcbf |
| PHPMD | Warning | 90 | 90 rule violations (IfStatementAssignment:12, UnusedLocalVariable:12, ExcessiveMethodLength:11, CyclomaticComplexity:10, UndefinedVariable:10) |
| Cpd | Warning | 6 | 6 duplicated chunks spanning 758 total lines (min-lines=5, min-tokens=70) |
| Composer validate | Info | 15 | valid; 15 advisory notes (composer validate --strict) |

#### PHPStan

Type-checks the module against a real Magento install. Re-runs per Magento + PHP version because resolvable symbols differ between releases.

| Magento | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|
| 2.4.7 | 56 | 56 | – | – |
| 2.4.8 | – | 57 | 57 | – |
| 2.4.9 | – | – | 56 | 56 |


### Tests

Unit and integration suites run per Magento + PHP cell. Test failures speak to the module's behaviour, not its compatibility with a line, so they're reported here separately.

#### Unit Tests

| Magento | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|
| 2.4.7 | N/A | N/A | – | – |
| 2.4.8 | – | N/A | N/A | – |
| 2.4.9 | – | – | N/A | N/A |

#### Integration Tests

| Magento | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|
| 2.4.7 | N/A | N/A | – | – |
| 2.4.8 | – | N/A | N/A | – |
| 2.4.9 | – | – | N/A | N/A |


### Security

Dependency-advisory audit (composer audit) plus a source malware scan. A malware detection fails the version outright.

| Tool | Status | Findings | Summary |
|---|---|---|---|
| Composer audit | Fail | 4 | 4 advisories (medium:1, high:3); 3 high+, 1 medium/unknown, 0 low |
| Malware scan | Pass | 0 |  |

## Parent package

[shipperhq/module-shipper](https://packagento.com/shipperhq/module-shipper.md) — full catalogue, pricing, install steps, and vendor info.