learning_ai_notes/backend/node_modules/safe-regex2
2026-03-10 08:53:07 -07:00
..
.github feat(notes): scaffold product surfaces and backend MCP slices 2026-03-10 08:53:07 -07:00
example feat(notes): scaffold product surfaces and backend MCP slices 2026-03-10 08:53:07 -07:00
test feat(notes): scaffold product surfaces and backend MCP slices 2026-03-10 08:53:07 -07:00
types feat(notes): scaffold product surfaces and backend MCP slices 2026-03-10 08:53:07 -07:00
.gitattributes feat(notes): scaffold product surfaces and backend MCP slices 2026-03-10 08:53:07 -07:00
eslint.config.js feat(notes): scaffold product surfaces and backend MCP slices 2026-03-10 08:53:07 -07:00
index.js feat(notes): scaffold product surfaces and backend MCP slices 2026-03-10 08:53:07 -07:00
LICENSE feat(notes): scaffold product surfaces and backend MCP slices 2026-03-10 08:53:07 -07:00
package.json feat(notes): scaffold product surfaces and backend MCP slices 2026-03-10 08:53:07 -07:00
README.md feat(notes): scaffold product surfaces and backend MCP slices 2026-03-10 08:53:07 -07:00

safe-regex2

CI NPM version neostandard javascript style

Detect potentially catastrophic exponential-time regular expressions by limiting the star height to 1.

This is a fork of https://github.com/substack/safe-regex at 1.1.0.

WARNING: This module has both false positives and false negatives. It is not meant as a full checker, but it detects basic cases.

Install

npm i safe-regex2

Example

const safe = require('safe-regex2');
const regex = process.argv.slice(2).join(' ');
console.log(safe(regex));
$ node safe.js '(x+x+)+y'
false
$ node safe.js '(beep|boop)*'
true
$ node safe.js '(a+){10}'
false
$ node safe.js '\blocation\s*:[^:\n]+\b(Oakland|San Francisco)\b'
true

Methods

const safe = require('safe-regex')

const ok = safe(re, opts={})

Returns a boolean indicating whether the regex re is safe and not possibly catastrophic.

re can be a RegExp object or just a string.

If re is a string and is an invalid regex, it returns false.

  • opts.limit - maximum number of allowed repetitions in the entire regex. Default: 25.

License

Licensed under MIT.