contrib.nodejsscan.good_ratelimiting.rate_limit_control

rules:
  - id: rate_limit_control
    patterns:
      - pattern-either:
          - pattern: require("express-rate-limit");
          - pattern: require("express-limiter");
          - pattern: require("@authentication/rate-limit");
    message: This application has API rate limiting controls.
    languages:
      - javascript
    severity: WARNING
    metadata:
      category: security
      technology:
        - node.js
        - express
      license: Commons Clause License Condition v1.0[LGPL-2.1-only]