If we had other miscellaneous functions like this one, I would recommend creating a utils.py module. But since we have just one, let's do this instead:

1. Move it to the top of the module, above all the route definitions
2. Add an underscore to the front of its name. This is the way Python programmers (informally) denote private functions

Since we just have one model, it's fine to have one models.py file in the eta_notifications_flask directory instead of a models package with an order module.

Removing the models directory and instead putting Order inside one models.py should make the source code hierarchy a little simpler.

The update_order_status and update_notification_status functions in views.py both modify a single order. Let's make them methods on the Order model instead.

For example, this:

def update_notification_status(status, order):
    order.notification_status = status
    db.session.commit()

Could probably just be added to the Order model like this:

def update_notification_status(self, status):
    order.notification_status = status
    db.session.commit()

And then referenced in the views as order.update_notification_status([status])

Dependabot couldn't authenticate with https://pypi.python.org/simple/.

You can provide authentication details in your Dependabot dashboard by clicking into the account menu (in the top right) and selecting 'Config variables'.

View the update logs.

I think the README overall looks good. We should tweak a couple things though:

1. Let's add a new step between 5 and 6 that's called "Edit seed data." I accidentally ran the dbseed command before I read that the README recommends editing that data before I run the command.
2. Let's add a new step to the end of the README that recommends using ngrok to expose your app to the web. You might want to link to the most recent Twilio blog post on ngrok as part of your instructions:

https://www.twilio.com/blog/2015/09/6-awesome-reasons-to-use-ngrok-when-testing-webhooks.html

Last issue - just spotted a small typo at https://github.com/TwilioDevEd/eta-notifications-flask/blob/master/eta_notifications_flask/templates/show.html#L30

The button should read "Deliver the package" instead of "Deliver up the package."

Overall this app looks really good! And I especially appreciate the high test coverage.