express-rate-limit 7.5.1 → 8.0.1

package/dist/index.mjs

@@ -1,3 +1,170 @@
+// source/ip-key-generator.ts
+import { isIPv6 } from "node:net";
+import { Address6 } from "ip-address";
+function ipKeyGenerator(ip, ipv6Subnet = 56) {
+  if (ipv6Subnet && isIPv6(ip)) {
+    return `${new Address6(`${ip}/${ipv6Subnet}`).startAddress().correctForm()}/${ipv6Subnet}`;
+  }
+  return ip;
+}
+
+// source/memory-store.ts
+var MemoryStore = class {
+  constructor() {
+    /**
+     * These two maps store usage (requests) and reset time by key (for example, IP
+     * addresses or API keys).
+     *
+     * They are split into two to avoid having to iterate through the entire set to
+     * determine which ones need reset. Instead, `Client`s are moved from `previous`
+     * to `current` as they hit the endpoint. Once `windowMs` has elapsed, all clients
+     * left in `previous`, i.e., those that have not made any recent requests, are
+     * known to be expired and can be deleted in bulk.
+     */
+    this.previous = /* @__PURE__ */ new Map();
+    this.current = /* @__PURE__ */ new Map();
+    /**
+     * Confirmation that the keys incremented in once instance of MemoryStore
+     * cannot affect other instances.
+     */
+    this.localKeys = true;
+  }
+  /**
+   * Method that initializes the store.
+   *
+   * @param options {Options} - The options used to setup the middleware.
+   */
+  init(options) {
+    this.windowMs = options.windowMs;
+    if (this.interval) clearInterval(this.interval);
+    this.interval = setInterval(() => {
+      this.clearExpired();
+    }, this.windowMs);
+    this.interval.unref?.();
+  }
+  /**
+   * Method to fetch a client's hit count and reset time.
+   *
+   * @param key {string} - The identifier for a client.
+   *
+   * @returns {ClientRateLimitInfo | undefined} - The number of hits and reset time for that client.
+   *
+   * @public
+   */
+  async get(key) {
+    return this.current.get(key) ?? this.previous.get(key);
+  }
+  /**
+   * Method to increment a client's hit counter.
+   *
+   * @param key {string} - The identifier for a client.
+   *
+   * @returns {ClientRateLimitInfo} - The number of hits and reset time for that client.
+   *
+   * @public
+   */
+  async increment(key) {
+    const client = this.getClient(key);
+    const now = Date.now();
+    if (client.resetTime.getTime() <= now) {
+      this.resetClient(client, now);
+    }
+    client.totalHits++;
+    return client;
+  }
+  /**
+   * Method to decrement a client's hit counter.
+   *
+   * @param key {string} - The identifier for a client.
+   *
+   * @public
+   */
+  async decrement(key) {
+    const client = this.getClient(key);
+    if (client.totalHits > 0) client.totalHits--;
+  }
+  /**
+   * Method to reset a client's hit counter.
+   *
+   * @param key {string} - The identifier for a client.
+   *
+   * @public
+   */
+  async resetKey(key) {
+    this.current.delete(key);
+    this.previous.delete(key);
+  }
+  /**
+   * Method to reset everyone's hit counter.
+   *
+   * @public
+   */
+  async resetAll() {
+    this.current.clear();
+    this.previous.clear();
+  }
+  /**
+   * Method to stop the timer (if currently running) and prevent any memory
+   * leaks.
+   *
+   * @public
+   */
+  shutdown() {
+    clearInterval(this.interval);
+    void this.resetAll();
+  }
+  /**
+   * Recycles a client by setting its hit count to zero, and reset time to
+   * `windowMs` milliseconds from now.
+   *
+   * NOT to be confused with `#resetKey()`, which removes a client from both the
+   * `current` and `previous` maps.
+   *
+   * @param client {Client} - The client to recycle.
+   * @param now {number} - The current time, to which the `windowMs` is added to get the `resetTime` for the client.
+   *
+   * @return {Client} - The modified client that was passed in, to allow for chaining.
+   */
+  resetClient(client, now = Date.now()) {
+    client.totalHits = 0;
+    client.resetTime.setTime(now + this.windowMs);
+    return client;
+  }
+  /**
+   * Retrieves or creates a client, given a key. Also ensures that the client being
+   * returned is in the `current` map.
+   *
+   * @param key {string} - The key under which the client is (or is to be) stored.
+   *
+   * @returns {Client} - The requested client.
+   */
+  getClient(key) {
+    if (this.current.has(key)) return this.current.get(key);
+    let client;
+    if (this.previous.has(key)) {
+      client = this.previous.get(key);
+      this.previous.delete(key);
+    } else {
+      client = { totalHits: 0, resetTime: /* @__PURE__ */ new Date() };
+      this.resetClient(client);
+    }
+    this.current.set(key, client);
+    return client;
+  }
+  /**
+   * Move current clients to previous, create a new map for current.
+   *
+   * This function is called every `windowMs`.
+   */
+  clearExpired() {
+    this.previous = this.current;
+    this.current = /* @__PURE__ */ new Map();
+  }
+};
+
+// source/rate-limit.ts
+import { isIPv6 as isIPv62 } from "node:net";
+
 // source/headers.ts
 import { Buffer } from "node:buffer";
 import { createHash } from "node:crypto";
@@ -6,12 +173,12 @@ var SUPPORTED_DRAFT_VERSIONS = [
   "draft-7",
   "draft-8"
 ];
-var getResetSeconds = (resetTime, windowMs) => {
-  let resetSeconds = void 0;
+var getResetSeconds = (windowMs, resetTime) => {
+  let resetSeconds;
   if (resetTime) {
     const deltaSeconds = Math.ceil((resetTime.getTime() - Date.now()) / 1e3);
     resetSeconds = Math.max(0, deltaSeconds);
-  } else if (windowMs) {
+  } else {
     resetSeconds = Math.ceil(windowMs / 1e3);
   }
   return resetSeconds;
@@ -37,7 +204,7 @@ var setLegacyHeaders = (response, info) => {
 var setDraft6Headers = (response, info, windowMs) => {
   if (response.headersSent) return;
   const windowSeconds = Math.ceil(windowMs / 1e3);
-  const resetSeconds = getResetSeconds(info.resetTime);
+  const resetSeconds = getResetSeconds(windowMs, info.resetTime);
   response.setHeader("RateLimit-Policy", `${info.limit};w=${windowSeconds}`);
   response.setHeader("RateLimit-Limit", info.limit.toString());
   response.setHeader("RateLimit-Remaining", info.remaining.toString());
@@ -47,7 +214,7 @@ var setDraft6Headers = (response, info, windowMs) => {
 var setDraft7Headers = (response, info, windowMs) => {
   if (response.headersSent) return;
   const windowSeconds = Math.ceil(windowMs / 1e3);
-  const resetSeconds = getResetSeconds(info.resetTime, windowMs);
+  const resetSeconds = getResetSeconds(windowMs, info.resetTime);
   response.setHeader("RateLimit-Policy", `${info.limit};w=${windowSeconds}`);
   response.setHeader(
     "RateLimit",
@@ -57,19 +224,31 @@ var setDraft7Headers = (response, info, windowMs) => {
 var setDraft8Headers = (response, info, windowMs, name, key) => {
   if (response.headersSent) return;
   const windowSeconds = Math.ceil(windowMs / 1e3);
-  const resetSeconds = getResetSeconds(info.resetTime, windowMs);
+  const resetSeconds = getResetSeconds(windowMs, info.resetTime);
   const partitionKey = getPartitionKey(key);
-  const policy = `q=${info.limit}; w=${windowSeconds}; pk=:${partitionKey}:`;
   const header = `r=${info.remaining}; t=${resetSeconds}`;
-  response.append("RateLimit-Policy", `"${name}"; ${policy}`);
+  const policy = `q=${info.limit}; w=${windowSeconds}; pk=:${partitionKey}:`;
   response.append("RateLimit", `"${name}"; ${header}`);
+  response.append("RateLimit-Policy", `"${name}"; ${policy}`);
 };
 var setRetryAfterHeader = (response, info, windowMs) => {
   if (response.headersSent) return;
-  const resetSeconds = getResetSeconds(info.resetTime, windowMs);
+  const resetSeconds = getResetSeconds(windowMs, info.resetTime);
   response.setHeader("Retry-After", resetSeconds.toString());
 };
 
+// source/utils.ts
+var omitUndefinedProperties = (passedOptions) => {
+  const omittedOptions = {};
+  for (const k of Object.keys(passedOptions)) {
+    const key = k;
+    if (passedOptions[key] !== void 0) {
+      omittedOptions[key] = passedOptions[key];
+    }
+  }
+  return omittedOptions;
+};
+
 // source/validations.ts
 import { isIP } from "node:net";
 var ValidationError = class extends Error {
@@ -93,7 +272,6 @@ var ChangeWarning = class extends ValidationError {
 var usedStores = /* @__PURE__ */ new Set();
 var singleCountKeys = /* @__PURE__ */ new WeakMap();
 var validations = {
-  // eslint-disable-next-line @typescript-eslint/consistent-type-assertions
   enabled: {
     default: true
   },
@@ -228,7 +406,7 @@ var validations = {
     if (limit === 0) {
       throw new ChangeWarning(
         "WRN_ERL_MAX_ZERO",
-        `Setting limit or max to 0 disables rate limiting in express-rate-limit v6 and older, but will cause all requests to be blocked in v7`
+        "Setting limit or max to 0 disables rate limiting in express-rate-limit v6 and older, but will cause all requests to be blocked in v7"
       );
     }
   },
@@ -260,7 +438,7 @@ var validations = {
     if (onLimitReached) {
       throw new ChangeWarning(
         "WRN_ERL_DEPRECATED_ON_LIMIT_REACHED",
-        `The onLimitReached configuration option is deprecated and has been removed in express-rate-limit v7.`
+        "The onLimitReached configuration option is deprecated and has been removed in express-rate-limit v7."
       );
     }
   },
@@ -329,7 +507,8 @@ var validations = {
     const { stack } = new Error(
       "express-rate-limit validation check (set options.validate.creationStack=false to disable)"
     );
-    if (stack?.includes("Layer.handle [as handle_request]")) {
+    if (stack?.includes("Layer.handle [as handle_request]") || // express v4
+    stack?.includes("Layer.handleRequest")) {
       if (!store.localKeys) {
         throw new ValidationError(
           "ERR_ERL_CREATED_IN_REQUEST_HANDLER",
@@ -338,7 +517,38 @@ var validations = {
       }
       throw new ValidationError(
         "ERR_ERL_CREATED_IN_REQUEST_HANDLER",
-        `express-rate-limit instance should be created at app initialization, not when responding to a request.`
+        "express-rate-limit instance should be created at app initialization, not when responding to a request."
+      );
+    }
+  },
+  ipv6Subnet(ipv6Subnet) {
+    if (ipv6Subnet === false) {
+      return;
+    }
+    if (!Number.isInteger(ipv6Subnet) || ipv6Subnet < 32 || ipv6Subnet > 64) {
+      throw new ValidationError(
+        "ERR_ERL_IPV6_SUBNET",
+        `Unexpected ipv6Subnet value: ${ipv6Subnet}. Expected an integer between 32 and 64 (usually 48-64).`
+      );
+    }
+  },
+  ipv6SubnetOrKeyGenerator(options) {
+    if (options.ipv6Subnet !== void 0 && options.keyGenerator) {
+      throw new ValidationError(
+        "ERR_ERL_IPV6SUBNET_OR_KEYGENERATOR",
+        `Incompatible options: the 'ipv6Subnet' option is ignored when a custom 'keyGenerator' function is also set.`
+      );
+    }
+  },
+  keyGeneratorIpFallback(keyGenerator) {
+    if (!keyGenerator) {
+      return;
+    }
+    const src = keyGenerator.toString();
+    if ((src.includes("req.ip") || src.includes("request.ip")) && !src.includes("ipKeyGenerator")) {
+      throw new ValidationError(
+        "ERR_ERL_KEY_GEN_IPV6",
+        "Custom keyGenerator appears to use request IP without calling the ipKeyGenerator helper function for IPv6 addresses. This could allow IPv6 users to bypass limits."
       );
     }
   }
@@ -355,9 +565,7 @@ var getValidations = (_enabled) => {
       ..._enabled
     };
   }
-  const wrappedValidations = {
-    enabled
-  };
+  const wrappedValidations = { enabled };
   for (const [name, validation] of Object.entries(validations)) {
     if (typeof validation === "function")
       wrappedValidations[name] = (...args) => {
@@ -379,161 +587,7 @@ var getValidations = (_enabled) => {
   return wrappedValidations;
 };
 
-// source/memory-store.ts
-var MemoryStore = class {
-  constructor() {
-    /**
-     * These two maps store usage (requests) and reset time by key (for example, IP
-     * addresses or API keys).
-     *
-     * They are split into two to avoid having to iterate through the entire set to
-     * determine which ones need reset. Instead, `Client`s are moved from `previous`
-     * to `current` as they hit the endpoint. Once `windowMs` has elapsed, all clients
-     * left in `previous`, i.e., those that have not made any recent requests, are
-     * known to be expired and can be deleted in bulk.
-     */
-    this.previous = /* @__PURE__ */ new Map();
-    this.current = /* @__PURE__ */ new Map();
-    /**
-     * Confirmation that the keys incremented in once instance of MemoryStore
-     * cannot affect other instances.
-     */
-    this.localKeys = true;
-  }
-  /**
-   * Method that initializes the store.
-   *
-   * @param options {Options} - The options used to setup the middleware.
-   */
-  init(options) {
-    this.windowMs = options.windowMs;
-    if (this.interval) clearInterval(this.interval);
-    this.interval = setInterval(() => {
-      this.clearExpired();
-    }, this.windowMs);
-    if (this.interval.unref) this.interval.unref();
-  }
-  /**
-   * Method to fetch a client's hit count and reset time.
-   *
-   * @param key {string} - The identifier for a client.
-   *
-   * @returns {ClientRateLimitInfo | undefined} - The number of hits and reset time for that client.
-   *
-   * @public
-   */
-  async get(key) {
-    return this.current.get(key) ?? this.previous.get(key);
-  }
-  /**
-   * Method to increment a client's hit counter.
-   *
-   * @param key {string} - The identifier for a client.
-   *
-   * @returns {ClientRateLimitInfo} - The number of hits and reset time for that client.
-   *
-   * @public
-   */
-  async increment(key) {
-    const client = this.getClient(key);
-    const now = Date.now();
-    if (client.resetTime.getTime() <= now) {
-      this.resetClient(client, now);
-    }
-    client.totalHits++;
-    return client;
-  }
-  /**
-   * Method to decrement a client's hit counter.
-   *
-   * @param key {string} - The identifier for a client.
-   *
-   * @public
-   */
-  async decrement(key) {
-    const client = this.getClient(key);
-    if (client.totalHits > 0) client.totalHits--;
-  }
-  /**
-   * Method to reset a client's hit counter.
-   *
-   * @param key {string} - The identifier for a client.
-   *
-   * @public
-   */
-  async resetKey(key) {
-    this.current.delete(key);
-    this.previous.delete(key);
-  }
-  /**
-   * Method to reset everyone's hit counter.
-   *
-   * @public
-   */
-  async resetAll() {
-    this.current.clear();
-    this.previous.clear();
-  }
-  /**
-   * Method to stop the timer (if currently running) and prevent any memory
-   * leaks.
-   *
-   * @public
-   */
-  shutdown() {
-    clearInterval(this.interval);
-    void this.resetAll();
-  }
-  /**
-   * Recycles a client by setting its hit count to zero, and reset time to
-   * `windowMs` milliseconds from now.
-   *
-   * NOT to be confused with `#resetKey()`, which removes a client from both the
-   * `current` and `previous` maps.
-   *
-   * @param client {Client} - The client to recycle.
-   * @param now {number} - The current time, to which the `windowMs` is added to get the `resetTime` for the client.
-   *
-   * @return {Client} - The modified client that was passed in, to allow for chaining.
-   */
-  resetClient(client, now = Date.now()) {
-    client.totalHits = 0;
-    client.resetTime.setTime(now + this.windowMs);
-    return client;
-  }
-  /**
-   * Retrieves or creates a client, given a key. Also ensures that the client being
-   * returned is in the `current` map.
-   *
-   * @param key {string} - The key under which the client is (or is to be) stored.
-   *
-   * @returns {Client} - The requested client.
-   */
-  getClient(key) {
-    if (this.current.has(key)) return this.current.get(key);
-    let client;
-    if (this.previous.has(key)) {
-      client = this.previous.get(key);
-      this.previous.delete(key);
-    } else {
-      client = { totalHits: 0, resetTime: /* @__PURE__ */ new Date() };
-      this.resetClient(client);
-    }
-    this.current.set(key, client);
-    return client;
-  }
-  /**
-   * Move current clients to previous, create a new map for current.
-   *
-   * This function is called every `windowMs`.
-   */
-  clearExpired() {
-    this.previous = this.current;
-    this.current = /* @__PURE__ */ new Map();
-  }
-};
-
-// source/lib.ts
+// source/rate-limit.ts
 var isLegacyStore = (store) => (
   // Check that `incr` exists but `increment` does not - store authors might want
   // to keep both around for backwards compatibility.
@@ -577,18 +631,8 @@ var getOptionsFromConfig = (config) => {
     validate: validations2.enabled
   };
 };
-var omitUndefinedOptions = (passedOptions) => {
-  const omittedOptions = {};
-  for (const k of Object.keys(passedOptions)) {
-    const key = k;
-    if (passedOptions[key] !== void 0) {
-      omittedOptions[key] = passedOptions[key];
-    }
-  }
-  return omittedOptions;
-};
 var parseOptions = (passedOptions) => {
-  const notUndefinedOptions = omitUndefinedOptions(passedOptions);
+  const notUndefinedOptions = omitUndefinedProperties(passedOptions);
   const validations2 = getValidations(notUndefinedOptions?.validate ?? true);
   validations2.validationsConfig();
   validations2.draftPolliHeaders(
@@ -596,6 +640,11 @@ var parseOptions = (passedOptions) => {
     notUndefinedOptions.draft_polli_ratelimit_headers
   );
   validations2.onLimitReached(notUndefinedOptions.onLimitReached);
+  if (notUndefinedOptions.ipv6Subnet !== void 0 && typeof notUndefinedOptions.ipv6Subnet !== "function") {
+    validations2.ipv6Subnet(notUndefinedOptions.ipv6Subnet);
+  }
+  validations2.keyGeneratorIpFallback(notUndefinedOptions.keyGenerator);
+  validations2.ipv6SubnetOrKeyGenerator(notUndefinedOptions);
   let standardHeaders = notUndefinedOptions.standardHeaders ?? false;
   if (standardHeaders === true) standardHeaders = "draft-6";
   const config = {
@@ -624,21 +673,27 @@ var parseOptions = (passedOptions) => {
     skipSuccessfulRequests: false,
     requestWasSuccessful: (_request, response) => response.statusCode < 400,
     skip: (_request, _response) => false,
-    keyGenerator(request, _response) {
+    async keyGenerator(request, response) {
       validations2.ip(request.ip);
       validations2.trustProxy(request);
       validations2.xForwardedForHeader(request);
-      return request.ip;
+      const ip = request.ip;
+      let subnet = 56;
+      if (isIPv62(ip)) {
+        subnet = typeof config.ipv6Subnet === "function" ? await config.ipv6Subnet(request, response) : config.ipv6Subnet;
+        if (typeof config.ipv6Subnet === "function")
+          validations2.ipv6Subnet(subnet);
+      }
+      return ipKeyGenerator(ip, subnet);
     },
+    ipv6Subnet: 56,
     async handler(request, response, _next, _optionsUsed) {
       response.status(config.statusCode);
       const message = typeof config.message === "function" ? await config.message(
         request,
         response
       ) : config.message;
-      if (!response.writableEnded) {
-        response.send(message);
-      }
+      if (!response.writableEnded) response.send(message);
     },
     passOnStoreError: false,
     // Allow the default options to be overridden by the passed options.
@@ -706,7 +761,8 @@ var rateLimit = (passedOptions) => {
         limit,
         used: totalHits,
         remaining: Math.max(limit - totalHits, 0),
-        resetTime
+        resetTime,
+        key
       };
       Object.defineProperty(info, "current", {
         configurable: false,
@@ -786,9 +842,10 @@ var rateLimit = (passedOptions) => {
   middleware.getKey = typeof config.store.get === "function" ? config.store.get.bind(config.store) : getThrowFn;
   return middleware;
 };
-var lib_default = rateLimit;
+var rate_limit_default = rateLimit;
 export {
   MemoryStore,
-  lib_default as default,
-  lib_default as rateLimit
+  rate_limit_default as default,
+  ipKeyGenerator,
+  rate_limit_default as rateLimit
 };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "express-rate-limit",
-	"version": "7.5.1",
+	"version": "8.0.1",
 	"description": "Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.",
 	"author": {
 		"name": "Nathan Friedly",
@@ -56,78 +56,57 @@
 	},
 	"scripts": {
 		"clean": "del-cli dist/ coverage/ *.log *.tmp *.bak *.tgz",
-		"build:cjs": "esbuild --platform=node --bundle --target=es2022 --format=cjs --outfile=dist/index.cjs --footer:js=\"module.exports = rateLimit; module.exports.default = rateLimit; module.exports.rateLimit = rateLimit; module.exports.MemoryStore = MemoryStore;\" source/index.ts",
-		"build:esm": "esbuild --platform=node --bundle --target=es2022 --format=esm --outfile=dist/index.mjs source/index.ts",
+		"build:cjs": "esbuild --packages=external --platform=node --bundle --target=es2022 --format=cjs --outfile=dist/index.cjs --footer:js=\"module.exports = Object.assign(rateLimit, module.exports);\" source/index.ts",
+		"build:esm": "esbuild --packages=external --platform=node --bundle --target=es2022 --format=esm --outfile=dist/index.mjs source/index.ts",
 		"build:types": "dts-bundle-generator --out-file=dist/index.d.ts source/index.ts && cp dist/index.d.ts dist/index.d.cts && cp dist/index.d.ts dist/index.d.mts",
 		"compile": "run-s clean build:*",
 		"docs": "cd docs && mintlify dev",
-		"lint:code": "xo",
-		"lint:rest": "prettier --check .",
+		"lint:code": "biome check",
+		"lint:docs": "prettier --check docs/ *.md",
 		"lint": "run-s lint:*",
-		"format:code": "xo --fix",
-		"format:rest": "prettier --write .",
+		"format:code": "biome check --write",
+		"format:docs": "prettier --write docs/ *.md",
 		"format": "run-s format:*",
 		"test:lib": "jest",
 		"test:ext": "cd test/external/ && bash run-all-tests",
 		"test": "run-s lint test:lib",
 		"pre-commit": "lint-staged",
-		"prepare": "run-s compile && husky install config/husky"
+		"prepare": "run-s compile && husky"
 	},
 	"peerDependencies": {
 		"express": ">= 4.11"
 	},
 	"devDependencies": {
+		"@biomejs/biome": "2.1.1",
 		"@express-rate-limit/prettier": "1.1.1",
 		"@express-rate-limit/tsconfig": "1.0.2",
-		"@jest/globals": "29.7.0",
-		"@types/express": "4.17.20",
-		"@types/jest": "29.5.6",
-		"@types/node": "20.8.7",
-		"@types/supertest": "2.0.15",
-		"del-cli": "5.1.0",
+		"@jest/globals": "30.0.4",
+		"@types/express": "5.0.3",
+		"@types/jest": "30.0.0",
+		"@types/node": "24.0.14",
+		"@types/supertest": "6.0.3",
+		"del-cli": "6.0.0",
 		"dts-bundle-generator": "8.0.1",
-		"esbuild": "0.25.0",
-		"express": "4.21.1",
-		"husky": "8.0.3",
-		"jest": "29.7.0",
-		"lint-staged": "15.0.2",
-		"mintlify": "4.0.63",
+		"esbuild": "0.25.6",
+		"express": "5.1.0",
+		"husky": "9.1.7",
+		"jest": "30.0.4",
+		"lint-staged": "16.1.2",
+		"mintlify": "4.2.15",
 		"npm-run-all": "4.1.5",
+		"prettier": "3.6.2",
 		"ratelimit-header-parser": "0.1.0",
-		"supertest": "6.3.3",
-		"ts-jest": "29.1.1",
-		"ts-node": "10.9.1",
-		"typescript": "5.2.2",
-		"xo": "0.56.0"
-	},
-	"xo": {
-		"prettier": true,
-		"rules": {
-			"@typescript-eslint/no-empty-function": 0,
-			"@typescript-eslint/no-dynamic-delete": 0,
-			"@typescript-eslint/no-confusing-void-expression": 0,
-			"@typescript-eslint/consistent-indexed-object-style": [
-				"error",
-				"index-signature"
-			],
-			"n/no-unsupported-features/es-syntax": 0
-		},
-		"overrides": [
-			{
-				"files": "test/library/*.ts",
-				"rules": {
-					"@typescript-eslint/no-unsafe-argument": 0,
-					"@typescript-eslint/no-unsafe-assignment": 0
-				}
-			}
-		],
-		"ignore": [
-			"test/external"
-		]
+		"supertest": "7.1.3",
+		"ts-jest": "29.4.0",
+		"ts-node": "10.9.2",
+		"typescript": "5.8.3"
 	},
 	"prettier": "@express-rate-limit/prettier",
 	"lint-staged": {
-		"{source,test}/**/*.ts": "xo --fix",
-		"**/*.{json,yaml,md}": "prettier --write "
+		"*.{js,ts,json}": "biome check --write",
+		"*.{md,yaml}": "prettier --write"
+	},
+	"dependencies": {
+		"ip-address": "10.0.1"
 	}
 }