1.0.1
Latest- Security: a payment is recorded only when what Paddle collected pays the amount due, and only once, so a replayed return URL has no effect
- Security: webhook signatures older than a few minutes are refused, and a delivery already processed is never applied twice
- Security: a refund only cancels what was paid when it covers the whole transaction