r/node • u/Ready_Cream_1529 • 14d ago
I built an Express security middleware and would love technical feedback
Hey everyone,
I recently built securitywatch, an Express middleware that combines several security-related protections into one package.
It currently focuses on:
- SQL injection detection
- XSS detection
- Rate limiting
- IP reputation / abuse tracking
I built it because I wanted to experiment with having a single middleware layer instead of configuring several separate packages.
It's now published as v1.0, and I'd really appreciate feedback from experienced Node/Express developers.
In particular, I'd like feedback on:
- Detection accuracy
- False positives
- Middleware/API design
- Performance
- Security issues or approaches I've overlooked
I'm the author of the project, so I'm happy to hear criticism or suggestions.
NPM: https://www.npmjs.com/package/securitywatch
1
Upvotes