express-rate-limit/express-rate-limit

Health v2 · maintenance only

Adoption not part of the score

3289 stars · 257 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A rate-limiting middleware library for the Express web server, written in TypeScript. It limits repeated requests per IP or key over configurable time windows, with pluggable external data stores and standard RateLimit headers.

Use cases

• rate limit requests to a public express api
• protect password reset endpoints from brute force
• throttle login attempts per ip
• add RateLimit headers to express responses
• share rate limit counters across servers with redis
• return 429 when clients exceed a request quota

When to choose

• you run an Express (or Express-compatible) Node.js API and need request throttling
• you want a small, well-maintained middleware with memory or external stores
• you need standard draft RateLimit headers for clients

When to avoid

• you use a framework other than Express without compatibility
• you need distributed rate limiting without an external store like Redis
• you need advanced quota policies per user/API key beyond what the store plugins provide

Facets

library · maturity stable

rate-limiting middleware security http-server web-development backend security apis express rate-limiter brute-force-protection typescript nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="express-rate-limit/express-rate-limit")