express-slow-down VS express-rate-limit

express-slow-down provides a rate limiting middleware built on top of express-rate-limit. Instead of blocking requests outright, express-slow-down slows down the processing of incoming requests that exceed defined limits.

Almost all languages and frameworks also have libraries with which you can easily implement rate limiting without reinventing the wheel; some popular ones in the JavaScript ecosystem include the express-rate-limit package for Express.js and @nestjs/throttler for NestJS applications.

express-rate-limit is an npm library that provides a rate limiting middleware for Express, so it's easier to limit repeated requests to all APIs or only to specific endpoints. The middleware allows you to control how many requests the same user can make to the same endpoints before an application starts returning 429 Too Many Requests errors.

I think the readme gets included automatically even if you don't specify it in the files field, ditto for package.json.

Compare https://github.com/express-rate-limit/express-rate-limit/blo... to https://www.npmjs.com/package/express-rate-limit?activeTab=c...

Agree with you about the other points.

Express-rate-limit: A simple to use rate limiter for your Express apps. This can protect your applications from being overwhelmed by too many requests.

Implementing API rate limiting in your Node.js project is an important step toward maintaining the stability and reliability of your application. With the use of packages like express-rate-limit or rate-limiter-flexible, you can easily set limits on requests and prevent abuse of your API by malicious users.

One option would be to bake rate-limiting middleware into your service. For example, in express-rate-limit you can define a keyGenerator function that takes an HTTP request and extracts the key that should be rate limited. I assume there are similar middleware packages for other frameworks. This approach would get the job done and it would be transparent to your customers.

We are using Express, so we added the middleware express-rate-limit to our server-side code. If you are using Flask, there is Flask-Limiter. If you are using Django, there is Django Ratelimit. Laravel includes basic rate limiting.

The rate limiting middleware limits the number of requests that come from a specific user, IP address or location within a given window (period of time). This can be achieved using a package called express-rate-limit as middleware

is your server express? i have used this package with Redis https://www.npmjs.com/package/express-rate-limit works pretty well

The last feature is a rate limit to prevent spam. Highscore has no auth system all endpoints are public and can be accessible by anybody. That's why adding a rate limit is useful to prevent abuse requests for a malicious users. For this, I used the very good express-rate-limit library which does the job perfectly. Like all other features, you can configure the rate limit using env variables.