@convex-dev/rate-limiter

A rate limiter component for Convex. Define and use application-layer rate limits. Type-safe, transactional, fair, safe, and configurable sharding to scale.

Latest 0.4.2

NPM

86%

Total Score

healthy

Regular releases, active repository work, and organization backing outweigh a concentrated two-person contributor base.

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factor

Only two contributors were active in the last 3 months, and one made 82% of commits. The second contributor remains active, but concentration still creates moderate continuity risk.

Repo tooling

The project uses TypeScript, Vitest, Vite, and npm build tooling, but no security scanning tool was detected; the missing scanner is a modest hygiene gap.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations less transparent.

Version stability

Version 0.4.2 is not a stable major release and 30% of recent releases were prereleases, which adds some maturity uncertainty, but this release itself is not prerelease.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2025-10926 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @convex-dev/rate-limiter is vulnerable to Authorization Bypass Through User-Controlled Key in versions 0.3.1 - 0.3.1.	0.3.1 - 0.3.1	High