#896691 ITP: node-safe-regex -- Node.js module to detect expensive regular expressions

Package:
wnpp
Source:
wnpp
Submitter:
Date:
2025-11-29 16:30:00 UTC
Severity:
wishlist
#896691#5
Date:
2018-04-23 16:00:02 UTC
From:
To:
* Package name    : node-safe-regex
  Version         : 1.1.0
  Upstream Author : James Halliday <mail@substack.net> (http://substack.net)
* URL             : https://github.com/substack/safe-regex
* License         : Expat
  Programming Lang: JavaScript
  Description     : Node.js module to detect expensive regular expressions

 Node.js module to detect possibly catastrophic, exponential-time regular
 expressions by limiting the star height (the maximum nesting depth of stars
 appearing in that expression) to 1.
 .
 Node.js is an event-based server-side JavaScript engine.

This is required to update node-to-regex to version 3.0.2,
which in turn is required to update node-micromatch to 3.1.10:
https://salsa.debian.org/js-team/node-micromatch/wikis/home/edit
which in turn is required to update node-liftoff to 2.5.0:
https://salsa.debian.org/js-team/node-liftoff/wikis/home

My intention is to maintain it within the JavaScript maintainers team.

The repo will be on salsa:
https://salsa.debian.org/js-team/node-safe-regex

Paolo
#896691#14
Date:
2018-04-27 15:19:33 UTC
From:
To:
Hi, I have packaged node-safe-regex:
https://salsa.debian.org/js-team/node-safe-regex

It requires node-ret which is already in the NEW queue.
I have tested the build with sbuild --extra-package

I am Cc-ing the ITP.

Please someone sponsor the upload.

Paolo
#896691#19
Date:
2018-04-28 09:22:39 UTC
From:
To:
Uploaded, thanks!
#896691#28
Date:
2018-05-11 22:47:29 UTC
From:
To:
close 896691 2.3.0-1
thanks

see https://gitlab.labs.nic.cz/knot/knot-resolver/raw/v2.3.0/NEWS for
the fix of 2018-1110
#896691#33
Date:
2018-05-12 06:45:39 UTC
From:
To:
Il 12/05/2018 00:47, Daniel Kahn Gillmor ha scritto:

it is not clear to me why you claim that this package is now useless ?

Knot-resolver is a "caching full resolver implementation written in C and
LuaJIT" so how does this fix impact a javascript module such as safe-regex ?

It is still listed in the dependencies of to-regex:
https://github.com/jonschlinkert/to-regex/blob/master/package.json

Besides we have an upload sitting in the NEW queue...

Paolo
#896691#38
Date:
2018-05-14 16:01:40 UTC
From:
To:
Control: reopen 896691

apologies, this was a typo, and i meant to close 896681.  I've now
reopened this one.

Really sorry about the mistake!