HN Showcase
Back to browse
GitHub Repository

Find every webhook-verification bug in your codebase in under five minutes. Three-state verdicts across 21 providers in JS/TS, Python, and PHP. Zero off-machine traffic.

1 starsTypeScript

Hookwarden – npx tool to find and fix webhook HMAC bugs (JS/TS/Py/PHP)

by adelinalipsa·May 24, 2026·1 point·1 comment
Visit ProjectView on HN

AI Analysis

●●SolidSolve My ProblemNiche Gem

Finds middleware ordering bugs that standard linters miss completely.

Strengths
  • •Zero-network execution ensures no sensitive code leaves the machine during scans.
  • •SARIF 2.1.0 output enables direct integration with GitHub Code Scanning workflows.
  • •Three-state verdicts reduce false positives compared to binary pass/fail tools.
Weaknesses
  • •Zero stars and forks suggest the tool lacks community validation or real-world battle testing.
  • •Limited to three languages, missing Go and Java which are common in webhook-heavy services.
Category
Security
Target Audience

Backend developers and security engineers handling webhooks

Similar To

Semgrep · CodeQL · TruffleHog

Similar Projects

SaaS●●Solid

AI writes code – humans fix it

Fixes AI code bugs at $49 flat rate; clever arbitrage play, but scaling human QA is the real bottleneck.

Dark HorseSolve My Problem
stasman
843mo ago