50000 was taking >1 minute on some devices. 2000 should be ~1-2s in most browsers while still being meaningful work for bots. The HMAC key and expiration are the real security — cost is just friction. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Description
No description provided
Languages
TypeScript
49.5%
JavaScript
22%
HTML
12.1%
CSS
8.5%
Shell
7.2%
Other
0.7%