rack/rack-attack

Rack::Attack is a Ruby library designed to protect applications from malicious traffic through rate limiting, IP blocking, and request throttling. It provides a configurable middleware that integrates with various cache backends, including Redis and Memcached, to manage stateful security rules. The system emphasizes robustness and compatibility, featuring comprehensive test coverage and support for modern Rails and Rack versions.

This period focused on a major internal refactoring of the Rack::Attack library, introducing a new configuration and request handling architecture to improve robustness and extensibility. The team also established comprehensive project infrastructure, including test suites, documentation, and modernized dependencies, to support the new codebase structure.

6 changes

This period focused on extending Rack::Attack's compatibility with a wider range of cache backends, including Redis, Memcached, and various ActiveSupport cache stores. The work involved implementing dedicated proxy classes for these stores and significantly expanding the test suite to cover integration, acceptance, and edge-case scenarios such as offline caches and time-sensitive operations.

6 changes

rack/rack-attack was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point the surveyor at a repository you know and see whether you agree with it.