# shoppyhook

> A really simple and lightweight shoppy webhook middleware for express.

Latest version **1.3.0** (published 2026-05-21) · GPL-3.0 license · 0 weekly downloads

> **Deprecated.** This package is deprecated.

## Install

```sh
npm install shoppyhook
pnpm add shoppyhook
yarn add shoppyhook
bun add shoppyhook
```

## Health

**Score 10/100 (F)** — status: deprecated.

Negative: deprecated.

## Facts

| | |
|---|---|
| Version | 1.3.0 |
| Published | 2026-05-21 |
| First published | 2022-10-22 |
| Weekly downloads | 0 |
| License | GPL-3.0 |
| TypeScript types | none |
| Module format | ESM |
| Dependencies | 0 |
| Unpacked size | 38.8 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| GitHub stars | 1 |
| Author | dxxxxy |
| Maintainers | dxxxxy |
| Keywords | shoopy, webhook, express, middleware |

## Links

- npm: https://www.npmjs.com/package/shoppyhook
- Repository: https://github.com/DxxxxY/shoppyhook
- Issues: https://github.com/DxxxxY/shoppyhook/issues
- npm.io page: https://npm.io/package/shoppyhook

## Alternatives

- [@sindresorhus/slugify](https://npm.io/package/@sindresorhus/slugify.md) — 3.7M weekly downloads
- [solid-js](https://npm.io/package/solid-js.md) — 2.7M weekly downloads
- [expo-glass-effect](https://npm.io/package/expo-glass-effect.md) — 2.5M weekly downloads
- [nanoassert](https://npm.io/package/nanoassert.md) — 780.8K weekly downloads
- [@ffmpeg/ffmpeg](https://npm.io/package/@ffmpeg/ffmpeg.md) — 529.5K weekly downloads

## Recent versions

- 1.3.0 (latest) — 2026-05-21
- 1.2.0 — 2022-12-26
- 1.1.0 — 2022-10-23
- 1.0.7 — 2022-10-23
- 1.0.6 — 2022-10-23
- 1.0.5 — 2022-10-23
- 1.0.4 — 2022-10-23
- 1.0.3 — 2022-10-23
- 1.0.2 — 2022-10-23
- 1.0.1 — 2022-10-23
- 1.0.0 — 2022-10-22

## README

# shoppyhook
A really simple and lightweight shoppy webhook middleware for express. 

It will only let webhook requests pass that have a valid signature, meaning that faking purchase webhooks is not possible (provided that you do not leak your secret). The body will then be available as a JSON object in `req.body`.

## Install
```
npm i shoppyhook
```

## Usage
```js
const shoppyhook = require("shoppyhook")

app.use("/your/shoppy/endpoint", shoppyhook("secret"))
```

### Parser issues
You need to disable any parser you have enabled for the webhook route, otherwise it will not work as it requires the raw unparsed body.

Example: Using json as a global parser through `app.use(express.json())`, I can simply replace it with this workaround, which applies it globally except for that specific shoppy webhook route.
```js
app.use(req, res, next => req.path != "/your/shoppy/endpoint" ? express.json(req, res, next) : next())
```

## Disclaimer
This is for educational purposes only. I am not responsible for any damage caused by this tool.

## License
GPLv3 © dxxxxy

---
_Source: https://npm.io/package/shoppyhook · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._