express-rate-limit
Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.
16
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
nfriedlygamemaker1
Keywords
express-rate-limitexpressratelimitratelimitrate-limitmiddlewareipauthauthorizationsecuritybruteforcebruteforcebrute-forceattack
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | regressed-provenance | AI (provenance): Manual publish by known maintainer on a 48M/wk canonical package; no compromise indicator. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): ip-address replaces deprecated ip dep; legitimate established package. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher changed to GitHub Actions with SLSA provenance — this is a CI/CD publishing migration, standard for mature packages. | ai |