Virgil commented on issue core/php-plug-altum#1

Virgil
Mon, 23 Mar 2026 06:38:19 +0000

[audit] Security, API safety, missing tests, error handling
Fix Applied

Commit ad4bccf: fix(webhooks): harden verifier registration

Fixed eager instantiation — deferred via ServiceProvider

Webhook verification now validates secret properly (not just User-Agent check)

Added AltumWebhookVerifierTest (62 lines) + ServiceProviderTest

Note: composer.lock committed — may need removing for package repo