{"id":"security.webhook-signature.standardwebhooks","compat":{"runtime":"node@>=20"},"schema":"turbineh.component/v0.1","source":{"purl":"pkg:npm/standardwebhooks@1.1.1","repo":"https://github.com/standard-webhooks/standard-webhooks","integrity":"sha512-bCbX9ZEyFkWPsRz7Bl3NuQUJohmwGSev/yhr7vhaGPlc4AfIrspIRa6cPTBuI1ItmrTDJ4d/S2hCsfe4+vQGnQ=="},"status":"approved","effects":{"db":false,"fs":false,"network":false,"external_services":[]},"license":{"declared":"MIT","detected":"MIT","obligations":["preserve-notice"]},"quality":{"tests":{"date":"2026-10-10","passed":true,"command":"contract.test.ts (vitest, sandbox --network none)"}},"version":"0.1.0","category":"security","contract":{"errors":["see contract.test.ts"],"inputs":["see contract.test.ts"],"limits":["see contract.test.ts"],"outputs":["see contract.test.ts"]},"evidence":[{"ref":"npm registry metadata standardwebhooks@1.1.1","claim":"License MIT","origin":"maintainer"},{"ref":"https://api.osv.dev/v1/query","claim":"0 OSV advisories for standardwebhooks@1.1.1 on 2026-10-10","origin":"tested"},{"ref":"/Users/alexruiz/TURBINEH/YES-IF-API-PRODUCT/code-api-turbineh/bench/results/2026-10-10-certify-batch-2.json","claim":"Contract tests pass in the sandbox without network","origin":"tested"}],"security":{"scope":"Known advisories for this exact version (OSV). Transitive dependencies are scanned when the component is assembled.","tools":["osv.dev-api"],"findings":[],"scanned_at":"2026-10-10"},"relations":{"provides":["security.webhook-signature"],"requires":[],"conflicts":[],"tested_with":["contract-harness"]},"capability":{"cons":[],"does":"Signs and verifies webhooks following the Standard Webhooks spec","pros":[],"does_not":"Does not deliver or retry webhooks","use_cases":["saas-crud","internal-tool","landing-waitlist","bookings","client-portal"],"alternatives":[]},"integration":{"config":[],"install":"pnpm add standardwebhooks@1.1.1","strategy":"dependency","migrations":false}}