
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@railhook/node
Advanced tools
Node.js SDK for Railhook. No runtime dependencies.
npm install @railhook/node
import { Railhook } from '@railhook/node';
const client = new Railhook({
apiKey: process.env.RAILHOOK_API_KEY!,
baseUrl: 'https://railhook.io', // default http://localhost:8080
});
const event = await client.events.send(
{ type: 'order.completed', data: { orderId: 'ord_123', amount: 99.99 } },
'order-123-completed', // optional idempotency key
);
console.log(event.eventId, event.deliveriesCreated);
The signature covers the raw body, so read it before any JSON parser does.
import express from 'express';
import { constructEvent } from '@railhook/node';
const app = express();
app.post('/webhooks', express.raw({ type: 'application/json' }), (req, res) => {
try {
const event = constructEvent(req.body.toString(), req.headers, process.env.WEBHOOK_SECRET!);
console.log(event.eventId, event.data);
res.sendStatus(200);
} catch {
res.sendStatus(400);
}
});
verifyStandardWebhook checks the webhook-* headers instead. During a secret rotation
either secret's signature is accepted.
The client also covers endpoints, subscriptions, deliveries, consumers and portal sessions, and incoming sources and events. It does not retry: one call is one HTTP request.
Full docs: https://railhook.io/docs/tools/sdks/
npm install
npm test
npm run build
npm run smoke:live # against a running stack (make up)
MIT
FAQs
Official Node.js SDK for Railhook — reliable webhook infrastructure
The npm package @railhook/node receives a total of 1,737 weekly downloads. As such, @railhook/node popularity was classified as popular.
We found that @railhook/node demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.