[kodablah]

> Actually this is quite false. GraphQL queries are deterministic and Apollo offers great tools for query analysis.

What is false? Who said anything about determinism? Unless by deterministic you mean the ability to tell the future about what will be called. I'm talking about giving clients the flexibility instead of having predictability in the call. I'm saying that flexibility has costs especially as systems grow. It's not just GraphQL, lots of systems that are essentially query languages serialized to HTTP requests have this problem. Whether, once you know the call it's deterministic, or whether you can theoretically map all permutations doesn't absolve the practice of giving the clients so much free will.

[joevandyk]

Time the queries out after X seconds. Limit people to X seconds of query time each hour.