Functional coverage, security, rights, price, and integration effort—not package popularity.
| Decision evidence | HMAC Webhook Signature Verifier v1.15.0 | Webhook Retry and Dead-Letter Worker v1.5.0 | Idempotency Key Guard v1.13.0 |
|---|---|---|---|
| Purpose | webhook security, signature verification, hmac, replay prevention | webhooks, retries, dead letter queue, event delivery | idempotency, duplicate request prevention, payments, webhooks |
| Runtime | TypeScript / node 20 · 22 | TypeScript / node 20 · 22 | TypeScript / node 20 · 22 |
| Frameworks | Web Crypto, Express, Fastify | BullMQ, AWS SDK | Zod, Redis-compatible |
| Deployment | node-service, aws-lambda, vercel | container, aws-lambda | node-service, aws-lambda |
| Security | 99/100 · 0 critical · 0 high | 92/100 · 0 critical · 0 high | 97/100 · 0 critical · 0 high |
| Test coverage | 99% / 267 tests | 95% / 257 tests | 99% / 267 tests |
| Source rights | Source + modification | Source + modification | Source + modification |
| Hosted access | Not available | Not available | Not available |
| Commercial models | licensed artifact, source license | licensed artifact, source license | licensed artifact, source license |
| Lowest commercial offer | $9Developer artifactlicensed artifact · individual | $199Developer artifactlicensed artifact · individual | $9Developer artifactlicensed artifact · individual |
| Integration | 0.5 estimated hours | 2 estimated hours | 0.5 estimated hours |
| Maintenance | active | active | active |
| Seller | Boundary Logic · 5/5 | Reliable Systems · 4.8/5 | Reliable Systems · 4.8/5 |
Open the strongest functional match, inspect its raw manifest, then run a fixture evaluation.