This limiter is amazing. One question though.

[Deleted user]

Cannot find out how / where it performs the ban on the user if they exceeded the requests? Is it a IP ban or just returning false in javascript?

[jhurliman]

Banning, users, and blacklisting IP addresses are all outside of the scope of this library. If you want to detect users exceeding their rate limit, use tryRemoveTokens and check for a false return value.