Skip to main content
← Back to list
01Issue
FeatureShippedSwamp CLI
Assigneesstack72

Relationships

#725 Dead code: verifySignature in webhook.ts superseded by verifier abstraction

Opened by keeb · 6/21/2026· Shipped 6/21/2026

After the webhook verifier refactor, handleRequest in src/serve/webhook.ts delegates signature verification to createVerifier(endpoint.verifier).verify() (webhook.ts:333,365). The standalone verifySignature function (webhook.ts:172) is no longer called internally — only by its own tests.

It is still re-exported from src/serve/mod.ts (line 37), which keeps it in the public API surface for external consumers.

Suggestion: Deprecate or remove verifySignature in a follow-up, since the createVerifier({scheme: "github"}) path fully supersedes it. If it must remain for backward compatibility, mark it @deprecated and point to the verifier API.

Severity: Low — cleanup, no functional impact.

02Bog Flow
OPENTRIAGEDIN PROGRESSSHIPPED+ 1 MOREASSIGNED+ 2 MOREREVIEW+ 3 MOREPR_MERGED+ 1 MORENOTIFICATION_SKIPPED

Shipped

6/21/2026, 9:11:53 PM

Click a lifecycle step above to view its details.

03Sludge Pulse
stack72 assigned stack726/21/2026, 8:41:52 PM

Sign in to post a ripple.