50000 was taking >1 minute on some devices. 2000 should be ~1-2s in most browsers while still being meaningful work for bots. The HMAC key and expiration are the real security — cost is just friction. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Description
No description provided
Languages
TypeScript
52.8%
JavaScript
21%
HTML
11.2%
CSS
7.9%
Shell
6.5%
Other
0.6%