Express js security

For a small project that has no authentication system, what are the nessecary security practices i need to follow to protect from attacks , things like rate limiting maybe , and what are the best Libraries to achieve it