MetaCredo.Check.Warning.MissingThrottle (MetaCredo v0.1.0)

View Source

Detects expensive operations triggered by user input (form submissions, search endpoints, API mutations) without rate limiting or throttling. In LiveView, form inputs sending phx-change events should use phx-debounce or phx-throttle to avoid flooding the server.

For API endpoints, add rate-limiting middleware (e.g. Hammer, PlugAttack, ExRated).

Category: Warning / Priority: normal