rate-limiter-flexible
Node.js atomic and non-atomic counters, rate limiting tools, protection from DoS and brute-force attacks at scale
84%
Total Score
healthy
Long-lived, actively maintained package with strong documentation; CI uses an unpinned container image and lacks provenance attestation.
Health Score Breakdown
No registry build attestation or trusted-publisher provenance is present, leaving the relationship between the published artifact and its source less independently verifiable.
No build tool or security scanning tool was detected, which weakens automated assurance even though the repository has active development and a tested workflow.
The repository has no security policy, reducing transparency about vulnerability reporting and maintainer response expectations.
The sole workflow was fully analyzed and uses read-only permissions, with no untrusted checkout or script-injection findings. However, its container image is unpinned with high-confidence severity, creating avoidable CI reproducibility and supply-chain risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 hours ago
- Created
- 8 years ago
- Unpacked Size
- 0.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.