express-rate-limit

Install cost

What you actually take on by adding express-rate-limit to a project.

Compatibility

Node.js

node >= 16

Module format

ESM + CommonJS

TypeScript

Types included

Install scripts

None

Quick start

A usage example from the express-rate-limit README.

import { rateLimit } from 'express-rate-limit'

const limiter = rateLimit({
	windowMs: 15 * 60 * 1000, // 15 minutes
	limit: 100, // Limit each IP to 100 requests per `window` (here, per 15 minutes).
	standardHeaders: 'draft-8', // draft-6: `RateLimit-*` headers; draft-7 & draft-8: combined `RateLimit` header
	legacyHeaders: false, // Disable the `X-RateLimit-*` headers.
	ipv6Subnet: 56, // Set to 60 or 64 to be less aggressive, or 52 or 48 to be more aggressive
	// store: ... , // Redis, Memcached, etc. See below.
})

// Apply the rate limiting middleware to all requests.
app.use(limiter)

express-rate-limit vs the alternatives

Packages solving a similar problem in the npm ecosystem, compared on the signals that drive an adoption decision.

Dependencies

Declared by express-rate-limit v8.7.0. Runtime dependencies are installed with the package; dev dependencies are not.

Used by

Popular packages that depend on express-rate-limit.

Relationship graph

Dependencies (left) and dependents (right) of express-rate-limit.

Frequently installed together

Release history

22 releases in the last two years, typically about 9 days apart.

Overview

express-rate-limit is an npm package that basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset. It has 2 known dependents in the graph. The latest version is 8.7.0, released under the MIT license.

Auto-generated from collected registry metadata. No external claims are inferred.

Funding

• https://github.com/sponsors/express-rate-limit

Frequently asked questions