express-rate-limit
npmv8.6.0TypeScriptBasic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.
Overview
express-rate-limit is an npm package that basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset. It is extremely widely used, with about 45.3M downloads per week and 2 known dependents in the graph. The latest version is 8.6.0, released under the MIT license.
Who should use it
Teams working in the npm ecosystem who need basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset and value a battle-tested, widely-adopted solution.
When not to use it
Consider an alternative if you need to minimize your dependency tree, or if a more actively-maintained option better fits your npm stack.
Pros
- Large, well-established user base (45.3M weekly downloads).
- Ships TypeScript type definitions.
- Clear open-source license (MIT).
Cons
- Large dependency tree (28 direct dependencies) increases install size and audit surface.
Auto-generated from collected registry metadata. No external claims are inferred.
Relationship graph
Dependencies (left) and dependents (right) of express-rate-limit.
Dependencies
Runtime (2)
Peer (1)
Dev (25)
Used by
Popular packages that depend on express-rate-limit.
Alternatives to express-rate-limit
Run multiple promise-returning & async functions with limited concurrency
Node.js CORS middleware
Express style path to RegExp utility
A library for manipulating IPv4 and IPv6 addresses in JavaScript.
Determine address of proxied request
Thunk middleware for Redux.
High performance middleware framework
Determine the address of a proxied request
limits calls to functions that return promises
Koa web app framework
Audited & minimal 0-dependency JS implementation of SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF & Scrypt
Check if a filename is safe to use in a path join operation
Frequently installed together
TypeScript definitions for ws
TypeScript definitions for cors
TypeScript definitions for node
TypeScript-first schema declaration and validation library with static type inference
Node.js CORS middleware
Next generation testing framework powered by Vite
Fast, unopinionated, minimalist web framework
Create and parse HTTP Content-Type header
Get and validate the raw body of a readable stream.
HTTP and HTTPS modules that follow redirects.
JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes
TypeScript Execute (tsx): Node.js enhanced with esbuild to run TypeScript & ESM files
Version history
| Version | Published | License |
|---|---|---|
| 8.6.0latest | 4 days ago | MIT |
| 8.5.2 | 2 months ago | MIT |
| 8.5.1 | 2 months ago | MIT |
| 8.5.0 | 2 months ago | MIT |
| 8.4.1 | 2 months ago | MIT |
| 8.4.0 | 2 months ago | MIT |
| 8.3.2 | 3 months ago | MIT |
| 8.3.1 | 4 months ago | MIT |
| 8.0.2 | 4 months ago | MIT |
| 8.2.2 | 4 months ago | MIT |
| 8.1.1 | 4 months ago | MIT |
| 8.3.0 | 4 months ago | MIT |
| 8.2.1 | 8 months ago | MIT |
| 8.2.0 | 8 months ago | MIT |
| 8.1.0 | 10 months ago | MIT |
| 8.0.1 | 1 year ago | MIT |
| 8.0.0 | 1 year ago | MIT |
| 7.5.1 | 1 year ago | MIT |
| 7.5.0 | 1 year ago | MIT |
| 7.4.1 | 1 year ago | MIT |
Maintainers
Funding
Frequently asked questions
How do I install express-rate-limit?
Run `npm install express-rate-limit` to add express-rate-limit to your npm project.
What license is express-rate-limit released under?
express-rate-limit is distributed under the MIT license.
How popular is express-rate-limit?
express-rate-limit has approximately 45,328,125 downloads per week and 2 known dependent packages.