standardwebhooks

What it is and what it does

standardwebhooks is a Python library that implements webhook verification according to the Standard Webhooks specification. It takes a base64-encoded secret and validates incoming webhook payloads against their cryptographic signatures, ensuring that webhook requests are authentic and have not been tampered with. The library has no external runtime dependencies, making it lightweight to integrate into existing applications.

The package is designed for developers building webhook receivers or integrating with services that send Standard Webhooks-compliant notifications. It handles the cryptographic verification step that sits between receiving a webhook request and processing its payload, reducing the risk of accepting forged or corrupted webhook data.

Use it for:

• Verify incoming webhooks from third-party services to ensure they are authentic before processing.
• Validate webhook signatures in a webhook receiver endpoint to prevent accepting spoofed requests.
• Integrate webhook verification into an event-driven application that consumes Standard Webhooks.
• Add cryptographic validation to a webhook gateway or proxy layer.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Provides webhook payload verification and signing for the Standard Webhooks specification, allowing you to validate incoming webhook requests using base64-encoded secrets.

Yes. The package is actively maintained, has zero known vulnerabilities, carries a permissive MIT license, installs with no dependencies, and solves a concrete security problem (webhook verification) for a widely-adopted standard. It is well-suited for any Python application that needs to receive and validate Standard Webhooks.

Install

standardwebhooks on PyPI

pip install standardwebhooks

uv add standardwebhooks

poetry add standardwebhooks

Installing standardwebhooks

Before you install

Low friction installation with no runtime dependencies. Actively maintained as of 24 days ago with support for current Python versions (3.9 through 3.14).

License in practice

MIT license permits free use, modification, and distribution with minimal restrictions, making it suitable for both open-source and commercial projects.

Quickstart

pip install standardwebhooks

from standardwebhooks.webhooks import Webhook

wh = Webhook(base64_secret)
wh.verify(webhook_payload, webhook_headers)

Requires Python 3.9 or later.

Verify before relying

• Whether the library supports both signing and verification, or verification only.
• What cryptographic algorithm the library uses for signature generation and validation.
• Whether it handles timestamp validation or replay attack prevention as part of Standard Webhooks spec.

Package facts

Evidence: standardwebhooks-1.1.0-py3-none-any.whl

Keywords: webhooks

Tags

More Software Development packages