npm · npm:express-rate-limit
express-rate-limit active
Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.
| Latest stable version | 8.7.0 |
|---|---|
| Published | 2026-08-29 00:49:51 UTC |
| Requires (engines) | {"node":">= 16"} |
| Peer dependencies | express >= 4.11 |
| Dist-tags | latest: 8.7.0 typescript: 0.0.0-typescript-beta-7 v2backports: 2.14.2 backport-3.x: 3.5.3 backport-8.0.x: 8.0.2 backport-8.1.x: 8.1.1 backport-8.2.x: 8.2.2 |
| License | MIT |
| Advisories on latest version | none known |
| Last verified | 2026-09-28 08:52:27 UTC |
| Sources | api.deps.dev, registry.npmjs.org, registry.npmjs.org |
Maintenance
| Activity | active |
|---|---|
| Last stable release | 2026-08-29 00:49:51 UTC · 30 days ago |
| Stable releases in the last 12 months | 17 |
| Published versions | 130 |
Heuristic based only on release dates; it does not measure issue or security response times.
Version history
| Version | Published |
|---|---|
8.7.0 | 2026-08-29 00:49:51 UTC |
8.6.2 | 2026-08-04 14:34:38 UTC |
8.6.1 | 2026-07-26 22:17:39 UTC |
8.6.0 | 2026-07-16 20:09:36 UTC |
8.5.2 | 2026-05-14 10:15:31 UTC |
8.5.1 | 2026-05-06 14:23:28 UTC |
8.5.0 | 2026-05-04 21:49:59 UTC |
8.4.1 | 2026-04-24 16:31:08 UTC |
8.4.0 | 2026-04-23 03:20:11 UTC |
8.3.2 | 2026-03-30 18:04:02 UTC |
8.3.1 | 2026-03-09 14:52:20 UTC |
8.0.2 | 2026-03-05 19:11:47 UTC |
8.2.2 | 2026-03-05 19:07:13 UTC |
8.1.1 | 2026-03-05 19:06:23 UTC |
8.3.0 | 2026-03-05 16:36:17 UTC |
8.2.1 | 2025-10-31 18:48:12 UTC |
8.2.0 | 2025-10-29 15:11:51 UTC |
8.1.0 | 2025-09-04 14:37:43 UTC |
8.0.1 | 2025-07-16 21:12:27 UTC |
8.0.0 | 2025-07-15 16:17:42 UTC |
Showing the 20 most recent of 124 versions. JSON
Frequently asked questions
What is the latest version of express-rate-limit?
The latest stable version of express-rate-limit is 8.7.0, published on 2026-08-29. Verified by Vigia on 2026-09-28.
Is express-rate-limit deprecated?
No. express-rate-limit is not marked as deprecated in the registry.
Which Node.js version does express-rate-limit require?
express-rate-limit 8.7.0 declares this requirement: {"node":">= 16"}.
Does express-rate-limit 8.7.0 have known vulnerabilities?
No known advisories affect express-rate-limit 8.7.0 according to the data Vigia checks.
Is express-rate-limit still maintained?
express-rate-limit published 17 stable releases in the last 12 months; the most recent was 30 days ago. Activity: active.
Observed changes
No changes observed yet since Vigia started tracking this package.
Related packages
- express
- co
- @babel/plugin-syntax-optional-chaining
- @babel/plugin-syntax-async-generators
- css.escape
- character-entities
- @babel/plugin-transform-destructuring
- wcwidth
- @types/eslint
- es-iterator-helpers
- @webassemblyjs/leb128
- character-entities-legacy
- emittery
For agents
GET https://vigia.coredls.cloud/v1/packages/npm/express-rate-limit
GET https://vigia.coredls.cloud/v1/packages/npm/express-rate-limit/versions/{version}