But you can just curl it again in a few minutes and bring it down again. And then again after that, so they claim that it can be done indefinitely. That’s quite a big difference.

Also, you can target not just express but an even higher volume small library that most large projects depend on.

I don’t get how every comment so far has dismissed DoS as a serious issue.