It’s hard for them to have two projects (the open source Deno and a closed source Deploy runtime that’s not actually Deno).

I’m wondering if this was open source rather than proprietary this sort of bug allowing a DDoS would have been caught before production. I know of multiple times in the past security issues were detected by the community and dealt in Node before they reached production.

It must be a challenge for the Deno team competing against the likes of Amazon or Google without the andvantage/burden of open source.