I built an Express.js middleware that detects bots using behavioral scoring — and published it to npm

Ever watched your “protected” Express API get farmed by bots anyway? You add IP rate limiting… they...