webhook-contract-drift-checker
Detects breaking envelope and payload changes in asynchronous webhooks before dispatching events.
| Size | Folder | Inside |
|---|---|---|
| 399 B | examples/ | 2 examples |
| 5.2 kB | bin/ | 1 script |
| 1.4 kB | src/ | 1 source file |
| 441 B | tests/ | 1 test file |
| 5.4 kB | (root) | 4 docs · 1 asset |
| Size | Path |
|---|---|
| 2.1 kB | LICENSE |
| 440 B | QUICKSTART.md |
| 1.9 kB | README.md |
| 326 B | SECURITY.md |
| 6 B | VERSION · binary |
| 5.2 kB | bin/webhook-drift-check.js |
| 213 B | examples/v1.json |
| 186 B | examples/v2.json |
| 619 B | package.json |
| 1.4 kB | src/detector.js |
| 441 B | tests/test_detector.js |
Already bought this?
View your purchasesREADME
webhook-contract-drift-checker
Detects breaking envelope and payload changes in asynchronous webhooks before dispatching events to external subscribers.
What Can Break?
Webhook publishers silently renaming event attributes, altering timestamps, or removing event envelopes that cause subscriber crashes.
What Does This Tool Check?
Event metadata (event_type, id, timestamp), data payload structures, signature header contracts, and event backward-compatibility.
What Does It NOT Check?
HTTP delivery retries or network delivery latency.
How Fast Can I Run It?
Under 5 seconds. Zero external dependencies. Pure Node.js standard library.
# Clone and run
git clone git@github.com:genesiscode2026/webhook-contract-drift-checker.git
cd webhook-contract-drift-checker
# Execute 60-second demo
./bin/webhook-drift-check.js --help
./bin/webhook-drift-check.js --old examples/v1.json --new examples/v2.json
What Do I Get?
- Deterministic CLI Exit Codes: Returns code
0on backward-compatible contracts; returns code1on breaking drift. - Machine-Readable JSON: Pass
--jsonto integrate directly into GitHub Actions, GitLab CI, or pre-commit hooks. - Human-Readable Diffs: Clear, actionable error reports with exact field pointers.
Commercial Distribution
- Catalog ID:
P49 - Price Band: higher-value compatibility ($19)
- List Price: $19 USD
- License: GENESIS Commercial Source License v1.0
- Seller:
genesiscode2026 - Official Storefront: Genesis Code on Getly
Security scan report
Scanned by X402 Git, OSV (opens in a new tab) and Socket (opens in a new tab) — passed on all three. Findings from X402 Git and Socket are listed below.
- secrets
- none found
- X402 Git
- size limits
- within caps
- X402 Git
- known malware
- no dependency manifests to check
- OSV
- known vulnerabilities
- no dependency manifests to check
- OSV
- dependency behaviour
- nothing on a direct dependency · 1 in transitive packages
- Socket
- instruction smuggling
- none found
- X402 Git
- what it can do
- listed below
- X402 Git
What this can do
- Tools
- none
- Runs
- bin/webhook-drift-check.js
- Talks to
- nothing
- Reads
- no environment variables
- At install
- nothing runs
- Links to
- img.shields.io
- www.getly.store
Findings (2)
- LOWSocket SBOM Resolver — Socket SBOM Resolver (transitive) — no lockfile, so installs are not reproducible
- LOWbin/webhook-drift-check.js — Ships the script bin/webhook-drift-check.js
Releases 1
- v1.0.02026-09-17
Commercial release v1.0.0 for webhook-contract-drift-checker