OPEN-SOURCE LIBRARY

Webhook verification and idempotency for Node.js.

webhook-safe is the separate TypeScript library for developers who want to run webhook signature verification and duplicate-event processing in their own application.

Install webhook-safe

npm install webhook-safe

The library includes Stripe, GitHub, Shopify, Slack Events API and generic HMAC-SHA256 helpers. Preserve the original request bytes and verify signatures before parsing or processing.

Use MemoryStore for isolated development and a shared RedisStore or PostgresStore across application instances. Processing leases coordinate claims; downstream side effects still need idempotency.

Package on npm →Source and usage guide →

Choose a provider guide

Library or Cloud?

Choose	When you need
webhook-safe library	Verification and idempotency primitives inside infrastructure you operate.
Webhook Safe Cloud	Managed webhook ingestion, durable acceptance, forwarding, retries and event inspection in the invitation-only pilot.

Installing the package does not create a hosted endpoint, queue or worker. Cloud subscriptions do not restrict installing the public library. Read the Cloud quickstart or configure a Cloud provider.