Comment by gnabgib

3 months ago

60 req/hour for unauthenticated users

5000 req/hour for authenticated - personal

15000 req/hour for authenticated - enterprise org

According to https://docs.github.com/en/rest/using-the-rest-api/rate-limi...

I bump into this just browsing a repo's code (unauth).. seems like it's one of the side effects of the AI rush.

Why would the changelog update not include this? it's the most salient piece of information.

I thought I was just misreading it and failing to see where they stated what the new rate limits were, since that's what anyone would care about when reading it.

  • > Why would the changelog update not include this?

    I don't know. The limits in the comment that you're replying to are unchanged from where they were a year ago.

    So far I don't see anything that has changed, and without an explanation from GitHub I don't think we'll know for sure what has changed.

  • because it will go way lower soon. and because they don't have to.

    they already have all your code. they've won.

    • you are not ... you don't have any part of your body in reality, do you? you have left the room.

      If people training LLMs are excessively scraping GitHub, it is well within GitHub's purview to limit that activity. It's their site and it's up to them to make sure that it stays available. If that means that they curtail the activity of abusive users, then of course they're going to do that.

      11 replies →

1 request a minute?!? wow that's just absurd you get it for just looking through code.

  • I opened a repo in a spare computer browser and clicked on a couple things and got a rate limit error. It feels effectively unusable unless you're logged in now (couldn't search from before, now you can't even browse).

  • agreed. when i first read the title i thought "oh what did the they up the rates to" - then i realized its more of a "downgraded rate limits"

    thanks github for the worse experience

I've hit this over the past week browsing the web UI. For some reason, github sessions are set really short and you don't realise you're not logged in until you get the error message.

I really wish github would stop logging me out.

  • Hmmmm, Github keeps me logged in for months I feel like. Unless I'm misunderstanding the github security logs, my current login is since march.

    • GH is Microsoft's most successful social network.

      GH now uses the publisher business model, and as such, they lose money when you're logged out. same reason why google, fb, etc will not ask you for a password for decades.

  • Something strange is going on. I think GH has kept me logged in for months at a time. I honestly can’t remember the last time I had to authenticate.

  • Yes, it's not the rate limits that are the problem per se but GitHub's tendency to log you out and make you go through 2fa.

    If they would let me stay logged in for a year then I wouldn't care so much.

1/min? That’s insanely low.

  • 60/hr is not the same as 1/min, unless you're trying to continually make as many requests as possible, like a crawler. and if that is for your use case, then your traffic is probably exactly what they're trying to block.

    • 60/h is obviously well within normal human usage of an app and not bot traffic...

      A normal rate limit to separate humans and bots would be something like 60 per minute. So it's about an order of magnitude too low.

      2 replies →

I bump into these limits just using a few public install scripts for things like Atuin, Babashka, and Clojure on a single machine on my home IP. They're way too low to be reasonable.