@produtype/core 0.67.0 → 0.68.0

package/dist/analyzer/detectSecurity.js

@@ -173,7 +173,30 @@ async function detectSecurity(ctx) {
      * are what HTTP calls this, and a hand-rolled limiter that writes one of them is
      * really limiting something. The package and its binding cover the rest.
      */
-    const rateLimitSignals = await (0, textSearch_1.searchInFiles)(ctx.root, source, [/Retry-After/i, /\b429\b/, /TooManyRequests/i], 20);
+    /**
+     * Issuing the refusal, not receiving one.
+     *
+     * `\b429\b` matched both directions. nocodb's webhook invoker handles a 429 coming
+     * back from somebody else's server — that is this project being throttled, the
+     * opposite of this project throttling — and it was one of the lines behind "rate
+     * limiting is in place somewhere". Its login has no throttle at all: the global
+     * guard is an id extractor, and the rest of the matches are migrations, a SQL
+     * client and mock fixtures.
+     *
+     * `res.status(429)` and `throw new TooManyRequestsError` are a server refusing a
+     * caller. `if (response.status === 429)` is a client being refused. HTTP names the
+     * number; the direction is in the shape around it.
+     */
+    const rateLimitSignals = await (0, textSearch_1.searchInFiles)(ctx.root, source, [
+        /\.status\(\s*429/,
+        /status(?:Code)?\s*[:=]\s*429/,
+        /sendStatus\(\s*429/,
+        /throw new \w*TooManyRequests/,
+        /abort\(\s*429/,
+        /HTTPException\(\s*429/,
+        /['"`]Retry-After['"`]\s*[,:]/i,
+        /setHeader\(\s*['"`]Retry-After/i,
+    ], 20);
     const rateLimit = rateLimitDep || rateLimitSignals.length > 0;
     /**
      * Rate limiting where the brute force happens.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@produtype/core",
-  "version": "0.67.0",
+  "version": "0.68.0",
   "description": "Deterministic CLI and library that analyzes a web application repository and reports how far it is from production-ready for the kind of product it is meant to be.",
   "license": "MIT",
   "bin": {