payram-webhook-integration
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The code examples for Express, FastAPI, Next.js, and other frameworks correctly implement constant-time string comparisons (e.g.,
timingSafeEqual,hmac.compare_digest) for webhook secret verification to prevent timing attacks. - [SAFE]: The documentation encourages the use of environment variables (
PAYRAM_WEBHOOK_SECRET) for secret management rather than hardcoding credentials. - [SAFE]: External links and repository references (GitHub, official website, Telegram support) are consistent with the vendor's identity and appear legitimate.
Audit Metadata