Functional coverage, security, rights, price, and integration effort—not package popularity.
| Decision evidence | HMAC Webhook Signature Verifier v1.15.0 | Idempotency Key Guard v1.13.0 | Exponential Backoff Policy Kit v1.14.0 |
|---|---|---|---|
| Purpose | webhook security, signature verification, hmac, replay prevention | idempotency, duplicate request prevention, payments, webhooks | retries, backoff, resilience, rate limiting |
| Runtime | TypeScript / node 20 · 22 | TypeScript / node 20 · 22 | TypeScript / node 20 · 22 |
| Frameworks | Web Crypto, Express, Fastify | Zod, Redis-compatible | Zero-dependency |
| Deployment | node-service, aws-lambda, vercel | node-service, aws-lambda | node-service, aws-lambda, container |
| Security | 99/100 · 0 critical · 0 high | 97/100 · 0 critical · 0 high | 98/100 · 0 critical · 0 high |
| Test coverage | 99% / 267 tests | 99% / 267 tests | 100% / 270 tests |
| Source rights | Source + modification | Source + modification | Source + modification |
| Hosted access | Not available | Not available | Not available |
| Commercial models | licensed artifact, source license | licensed artifact, source license | licensed artifact, source license |
| Lowest commercial offer | $9Developer artifactlicensed artifact · individual | $9Developer artifactlicensed artifact · individual | $5Developer artifactlicensed artifact · individual |
| Integration | 0.5 estimated hours | 0.5 estimated hours | 0.25 estimated hours |
| Maintenance | active | active | active |
| Seller | Boundary Logic · 5/5 | Reliable Systems · 4.8/5 | Reliable Systems · 4.8/5 |
Open the strongest functional match, inspect its raw manifest, then run a fixture evaluation.