But rate-limiting public data is a huge pain. You can't really just have a static file anymore. Maybe you can configure your HTTP server to do IP based rate limiting but that is always ineffective (example public clouds where the downloader gets a new IP every time) or hits bystanders (a reasonable download the egresses out of the same IP or net block).

So if you really want to do this you need to add API keys and authentication (even if it is free) to reliably track users.

Even then you will have some users that find it easier to randomly pick from 100 API keys rather than properly cache the data.