@joint-ops/hitlimit 1.0.2 → 1.0.4

package/README.md

@@ -16,7 +16,7 @@
 
 - **Blazing Fast** - 400,000+ ops/sec with memory store, ~7% HTTP overhead
 - **Zero Config** - Works out of the box with sensible defaults
-- **Tiny Footprint** - Only ~5KB minified, no bloat
+- **Tiny Footprint** - Only ~7KB core, zero runtime dependencies
 - **Framework Agnostic** - Express, NestJS, Fastify, native HTTP
 - **Multiple Stores** - Memory, Redis, SQLite for distributed systems
 - **TypeScript First** - Full type safety and IntelliSense support
@@ -32,17 +32,19 @@ hitlimit is designed for speed. Here's how it performs:
 
 | Store | Operations/sec | Avg Latency | Use Case |
 |-------|----------------|-------------|----------|
-| **Memory** | 400,000+ | 0.002ms | Single instance, no persistence |
-| **SQLite** | 35,000+ | 0.025ms | Single instance, persistence needed |
-| **Redis** | 12,000+ | 0.08ms | Multi-instance, distributed |
+| **Memory** | 2,320,000+ | 0.43μs | Single instance, no persistence |
+| **SQLite** | 393,000+ | 2.54μs | Single instance, persistence needed |
+| **Redis** | 6,500+ | 153μs | Multi-instance, distributed |
 
 ### vs Competitors
 
-| Library | Memory (ops/s) | Bundle Size |
-|---------|----------------|-------------|
-| **hitlimit** | **400,000** | **~5KB** |
-| rate-limiter-flexible | 250,000 | ~45KB |
-| express-rate-limit | 180,000 | ~15KB |
+| Library | Memory 10K IPs (ops/s) | Bundle Size |
+|---------|------------------------|-------------|
+| **hitlimit** | **2,320,000** | **~7KB** |
+| rate-limiter-flexible | 1,630,000 | ~155KB |
+| express-rate-limit | 1,220,000 | ~66KB |
+
+> **Note:** Benchmark results vary by hardware and environment. Run your own benchmarks to see results on your specific setup.
 
 ### HTTP Overhead
 
@@ -130,8 +132,12 @@ import { createHitLimit } from '@joint-ops/hitlimit/node'
 const limiter = createHitLimit({ limit: 100, window: '1m' })
 
 const server = http.createServer(async (req, res) => {
-  const result = await limiter(req, res)
-  if (!result.allowed) return // Already sent 429
+  const result = await limiter.check(req)
+  if (!result.allowed) {
+    res.writeHead(429, { 'Content-Type': 'application/json', ...result.headers })
+    res.end(JSON.stringify(result.body))
+    return
+  }
 
   res.writeHead(200)
   res.end('Hello!')
@@ -184,11 +190,12 @@ Rate limit by IP address, user ID, API key, or any custom identifier.
 hitlimit({
   key: (req) => {
     // By API key
-    if (req.headers['x-api-key']) return req.headers['x-api-key']
+    const apiKey = req.headers['x-api-key']
+    if (apiKey) return String(apiKey)
     // By user ID
     if (req.user?.id) return `user:${req.user.id}`
     // Fallback to IP
-    return req.ip
+    return req.ip || 'unknown'
   }
 })
 ```
@@ -216,7 +223,7 @@ hitlimit({
   window: '1m',            // Time window: 30s, 15m, 1h, 1d (default: '1m')
 
   // Custom key extraction
-  key: (req) => req.ip,
+  key: (req) => req.ip || 'unknown',
 
   // Tiered rate limits
   tiers: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@joint-ops/hitlimit",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Fast rate limiting middleware for Express, NestJS & Node.js - API throttling, brute force protection, request limiting",
   "author": {
     "name": "Shayan M Hussain",
@@ -119,7 +119,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@joint-ops/hitlimit-types": "1.0.2"
+    "@joint-ops/hitlimit-types": "1.0.4"
   },
   "peerDependencies": {
     "@nestjs/common": ">=8.0.0",