npm · npm:express-rate-limit
express-rate-limit active
Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.
The latest stable version of express-rate-limit is 8.7.4, published on 2026-11-09. Verified by Vigia on 2026-11-12.
| Latest stable version | 8.7.4 |
|---|---|
| Published | 2026-11-09 21:18:58 UTC |
| Install | npm install express-rate-limit@latest |
| Requires (engines) | {"node":">= 16"} |
| Peer dependencies | express >= 4.11 |
| Dist-tags | latest: 8.7.4 typescript: 0.0.0-typescript-beta-7 v2backports: 2.14.2 backport-3.x: 3.5.3 backport-8.0.x: 8.0.2 backport-8.1.x: 8.1.1 backport-8.2.x: 8.2.2 |
| License | MIT |
| Advisories on latest version | none known |
| Last verified | 2026-11-12 19:17:56 UTC |
| Sources | api.deps.dev, registry.npmjs.org, registry.npmjs.org |
Maintenance
| Activity | active |
|---|---|
| Last stable release | 2026-11-09 21:18:58 UTC · 3 days ago |
| Stable releases in the last 12 months | 19 |
| Published versions | 134 |
Heuristic based only on release dates; it does not measure issue or security response times.
Version history
| Version | Published |
|---|---|
8.7.4 | 2026-11-09 21:18:58 UTC |
8.7.3 | 2026-11-02 18:37:20 UTC |
8.7.2 | 2026-10-29 16:25:54 UTC |
8.7.1 | 2026-10-06 02:04:46 UTC |
8.7.0 | 2026-08-29 00:49:51 UTC |
8.6.2 | 2026-08-04 14:34:38 UTC |
8.6.1 | 2026-07-26 22:17:39 UTC |
8.6.0 | 2026-07-16 20:09:36 UTC |
8.5.2 | 2026-05-14 10:15:31 UTC |
8.5.1 | 2026-05-06 14:23:28 UTC |
8.5.0 | 2026-05-04 21:49:59 UTC |
8.4.1 | 2026-04-24 16:31:08 UTC |
8.4.0 | 2026-04-23 03:20:11 UTC |
8.3.2 | 2026-03-30 18:04:02 UTC |
8.3.1 | 2026-03-09 14:52:20 UTC |
8.0.2 | 2026-03-05 19:11:47 UTC |
8.2.2 | 2026-03-05 19:07:13 UTC |
8.1.1 | 2026-03-05 19:06:23 UTC |
8.3.0 | 2026-03-05 16:36:17 UTC |
8.2.1 | 2025-10-31 18:48:12 UTC |
Showing the 20 most recent of 128 versions. JSON
Version compatibility
Newest stable version that declares support for each runtime version (from the requirements published with each version).
| Runtime | Newest compatible version |
|---|---|
node 16 | 8.7.4 |
node 18 | 8.7.4 |
node 20 | 8.7.4 |
node 22 | 8.7.4 |
node 24 | 8.7.4 |
Give your AI agent these facts
Vigia is a free MCP server: your coding agent checks versions, breaking changes and vulnerabilities before it writes code. No signup, no API key.
claude mcp add --transport http vigia https://vigia.coredls.cloud/mcp
Add to CursorAdd to VS Code★ Star on GitHub
Any other MCP client
{ "mcpServers": { "vigia": { "url": "https://vigia.coredls.cloud/mcp" } } }Agent skill (SKILL.md): tells the agent when to use Vigia · GitHub Action for pull requests
Frequently asked questions
What is the latest version of express-rate-limit?
The latest stable version of express-rate-limit is 8.7.4, published on 2026-11-09. Verified by Vigia on 2026-11-12.
How do I install the latest version of express-rate-limit?
Run npm install express-rate-limit@latest. The latest stable version is 8.7.4 (verified 2026-11-12).
Is express-rate-limit deprecated?
No. express-rate-limit is not marked as deprecated in the registry.
Which Node.js version does express-rate-limit require?
express-rate-limit 8.7.4 declares this requirement: {"node":">= 16"}.
Does express-rate-limit 8.7.4 have known vulnerabilities?
No known advisories affect express-rate-limit 8.7.4 according to the data Vigia checks.
Is express-rate-limit still maintained?
express-rate-limit published 19 stable releases in the last 12 months; the most recent was 3 days ago. Activity: active.
Observed changes
- ue Nov 10 2026 19:13:55 GMT+0000 (Coordinated Universal Time) — released 8.7.4 → 8.7.4
- Mon Nov 09 2026 21:42:23 GM +0000 (Coordinated Universal Time) — released 8.7.3 → 8.7.4
- Mon Nov 02 2026 19:02:49 GM +0000 (Coordinated Universal Time) — released 8.7.2 → 8.7.3
- Fri Oct 30 2026 04:58:05 GM +0000 (Coordinated Universal Time) — released 8.7.2 → 8.7.2
- hu Oct 29 2026 16:27:22 GMT+0000 (Coordinated Universal Time) — released 8.7.1 → 8.7.2
- ue Oct 06 2026 02:26:05 GMT+0000 (Coordinated Universal Time) — released 8.7.0 → 8.7.1
Related packages
- express
- co
- @babel/plugin-syntax-optional-chaining
- css.escape
- @babel/plugin-syntax-async-generators
- @babel/plugin-transform-destructuring
- character-entities
- @types/eslint
- wcwidth
- @webassemblyjs/leb128
- es-iterator-helpers
- emittery
- character-entities-legacy
Badges for your README
Show the latest version, maintenance status and deprecation status of this package. Copy the Markdown:
[](https://vigia.coredls.cloud/npm/express-rate-limit) [](https://vigia.coredls.cloud/npm/express-rate-limit) [](https://vigia.coredls.cloud/npm/express-rate-limit)
For agents
GET https://vigia.coredls.cloud/v1/packages/npm/express-rate-limit
GET https://vigia.coredls.cloud/v1/packages/npm/express-rate-limit/versions/{version}