express-rate-limit
Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.
express-rate-limit@8.7.1 was published on 2026-10-06. Its manifest declares 2 runtime dependencies and 1 peer requirement. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >= 16.
All express-rate-limit versions · Permanent reference to 8.7.1
Package specifications
| Version | 8.7.1 |
|---|---|
| License declaration | MIT |
| Published | 2026-10-06T02:04:46.635Z |
| Node.js requirement | >= 16 |
| Type declarations | Bundled declarations |
| Runtime dependency count | 2 |
| Peer requirement count | 1 |
| Optional dependency count | 0 |
| Minified size | 52.31 KiB |
| Minified + gzip | 16.04 KiB |
| Unpacked distribution size | 151.09 KiB |
| Published file count | 9 |
| Package type | module |
| ES module entry | ./dist/index.mjs |
| Default entry | ./dist/index.cjs |
| Side effects declaration | Not declared |
| Direct advisories | 0 |
| Resolved graph dependencies | 3 |
| Repository stars | 3313 |
| Repository forks | 264 |
Install express-rate-limit 8.7.1
npm install express-rate-limit@8.7.1 pnpm add express-rate-limit@8.7.1 yarn add express-rate-limit@8.7.1
Runtime dependencies
- debug ^4.4.3
- ip-address ^10.2.0
Peer requirements
- express >= 4.11
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- debug@4.4.3 — direct
- ip-address@10.7.5 — direct
- ms@2.1.3 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
Evidence and freshness
- https://registry.npmjs.org/express-rate-limit/8.7.1 — retrieved 2026-10-29T11:09:33.050Z
- https://api.deps.dev/v3/systems/npm/packages/express-rate-limit/versions/8.7.1 — retrieved 2026-10-29T11:09:33.741Z
- https://bundlephobia.com/api/size?package=express-rate-limit%408.7.1 — retrieved 2026-10-29T11:09:33.789Z
- https://api.deps.dev/v3/systems/npm/packages/express-rate-limit/versions/8.7.1:dependencies — retrieved 2026-10-29T11:09:33.801Z
- https://api.deps.dev/v3/projects/github.com%2Fexpress-rate-limit%2Fexpress-rate-limit — retrieved 2026-10-29T11:09:33.948Z