npm · #3049 most downloaded on npm

safe-regex2

5.1.177M downloads/mofastify/safe-regex2 ↗New releases in your daily digest, changelog included.

detect possibly catastrophic, exponential-time regular expressions

Last release 5 months ago
19 Apr 2026
Release timing varies
gaps range from 5 weeks to 3.3 years
Most releases are documented
notes for 7 of 8 stable releases
Nothing withdrawn
no release was ever pulled
8 years old
8 releases · first in 2019

Release timeline

8 releases since 2019

20192020202120222023202420252026

Releases

5.1.119 Apr 2026
build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml from 5 to 6 by @dependabot[bot] in https://github.com/fastify/safe-regex2/pull/72
What's Changed

build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml from 5 to 6 by @dependabot[bot] in https://github.com/fastify/safe-regex2/pull/72

build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @dependabot[bot] in https://github.com/fastify/safe-regex2/pull/74

ci: add lock-threads workflow by @Fdawgs in https://github.com/fastify/safe-regex2/pull/75

fix: detect alternation inside REPETITION groups by @deepview-autofix in https://github.com/fastify/safe-regex2/pull/76

New Contributors

@deepview-autofix made their first contribution in https://github.com/fastify/safe-regex2/pull/76

Full Changelog: https://github.com/fastify/safe-regex2/compare/v5.1.0...v5.1.1
Open source →
5.1.012 Mar 2026
ci: set permissions at workflow level by @Fdawgs in https://github.com/fastify/safe-regex2/pull/56
What's Changed

ci: set permissions at workflow level by @Fdawgs in https://github.com/fastify/safe-regex2/pull/56

ci: restore job level permissions by @Fdawgs in https://github.com/fastify/safe-regex2/pull/57

build(deps-dev): bump tsd from 0.31.2 to 0.32.0 by @dependabot[bot] in https://github.com/fastify/safe-regex2/pull/58

test: migrate to node:test by @inyourtime in https://github.com/fastify/safe-regex2/pull/59

feat: make it possible to be run via packageRunner by @Uzlopak in https://github.com/fastify/safe-regex2/pull/60

feat: extract walk function out of safeRegex by @Uzlopak in https://github.com/fastify/safe-regex2/pull/61

chore(license): update date ranges; standardise style by @Fdawgs in https://github.com/fastify/safe-regex2/pull/62

build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @dependabot[bot] in https://github.com/fastify/safe-regex2/pull/63

chore(.npmrc): ignore scripts by @Fdawgs in https://github.com/fastify/safe-regex2/pull/64

build(deps-dev): remove @fastify/pre-commit by @Fdawgs in https://github.com/fastify/safe-regex2/pull/65

ci(ci): add concurrency config by @Fdawgs in https://github.com/fastify/safe-regex2/pull/66

build(deps-dev): bump c8 from 10.1.3 to 11.0.0 by @dependabot[bot] in https://github.com/fastify/safe-regex2/pull/68

chore(license): standardise license notice by @Fdawgs in https://github.com/fastify/safe-regex2/pull/67

ci: remove stale.yml by @Tony133 in https://github.com/fastify/safe-regex2/pull/71

New Contributors

@inyourtime made their first contribution in https://github.com/fastify/safe-regex2/pull/59

@Tony133 made their first contribution in https://github.com/fastify/safe-regex2/pull/71

Full Changelog: https://github.com/fastify/safe-regex2/compare/v5.0.0...v5.1.0

4.0.130 Dec 2024

docs(readme): replace var statements by @Fdawgs in https://github.com/fastify/safe-regex2/pull/41

What's Changed

docs(readme): replace var statements by @Fdawgs in https://github.com/fastify/safe-regex2/pull/41
chore(package): add bugs url, fix homepage and repository urls by @Fdawgs in https://github.com/fastify/safe-regex2/pull/42
build(deps-dev): replace standard with neostandard by @Fdawgs in https://github.com/fastify/safe-regex2/pull/43
build(deps-dev): add eslint, peer dep of neostandard by @Fdawgs in https://github.com/fastify/safe-regex2/pull/44
chore(package): add funding by @Fdawgs in https://github.com/fastify/safe-regex2/pull/45
refactor(index): remove unused catch binding by @Fdawgs in https://github.com/fastify/safe-regex2/pull/46
perf(index): use optional chaining by @Fdawgs in https://github.com/fastify/safe-regex2/pull/47
build(deps-dev): bump neostandard from 0.11.9 to 0.12.0 by @dependabot in https://github.com/fastify/safe-regex2/pull/48
build(deps-dev): bump c8 from 7.14.0 to 10.1.3 by @dependabot in https://github.com/fastify/safe-regex2/pull/49
docs(readme): use .md extension, add badges by @Fdawgs in https://github.com/fastify/safe-regex2/pull/50

Full Changelog: https://github.com/fastify/safe-regex2/compare/v4.0.0...v4.0.1

Open source →

4.0.012 Jul 2024

chore(.gitignore): add clinic by @Fdawgs in https://github.com/fastify/safe-regex2/pull/23

What's Changed

chore(.gitignore): add clinic by @Fdawgs in https://github.com/fastify/safe-regex2/pull/23
chore(.gitignore): add bun lockfile by @Fdawgs in https://github.com/fastify/safe-regex2/pull/24
Bump tsd from 0.25.0 to 0.27.0 by @dependabot in https://github.com/fastify/safe-regex2/pull/25
Bump ret from 0.4.3 to 0.5.0 by @dependabot in https://github.com/fastify/safe-regex2/pull/26
Bump tsd from 0.27.0 to 0.28.0 by @dependabot in https://github.com/fastify/safe-regex2/pull/27
ci: only trigger on pushes to main branches by @Fdawgs in https://github.com/fastify/safe-regex2/pull/28
Bump tsd from 0.28.1 to 0.29.0 by @dependabot in https://github.com/fastify/safe-regex2/pull/29
chore: add .gitattributes file by @Fdawgs in https://github.com/fastify/safe-regex2/pull/30
chore: add missing use strict directives by @Fdawgs in https://github.com/fastify/safe-regex2/pull/31
chore(package): explicitly declare js module type by @Fdawgs in https://github.com/fastify/safe-regex2/pull/32
Bump tsd from 0.29.0 to 0.30.0 by @dependabot in https://github.com/fastify/safe-regex2/pull/33
chore(.gitignore): add .tap/ dir by @Fdawgs in https://github.com/fastify/safe-regex2/pull/34
build(deps-dev): bump tsd from 0.30.7 to 0.31.0 by @dependabot in https://github.com/fastify/safe-regex2/pull/35
Update for Fastify v5 by @gurgunday in https://github.com/fastify/safe-regex2/pull/36
Merget next into master by @jsumners in https://github.com/fastify/safe-regex2/pull/40

New Contributors

@jsumners made their first contribution in https://github.com/fastify/safe-regex2/pull/40

Full Changelog: https://github.com/fastify/safe-regex2/compare/v3.1.0...v4.0.0

Open source →

3.0.025 May 2022

Add Greenkeeper badge 🌴 by @greenkeeper in https://github.com/fastify/safe-regex2/pull/1

What's Changed

Add Greenkeeper badge 🌴 by @greenkeeper in https://github.com/fastify/safe-regex2/pull/1
Update ret to the latest version 🚀 by @greenkeeper in https://github.com/fastify/safe-regex2/pull/2
Update standard to the latest version 🚀 by @greenkeeper in https://github.com/fastify/safe-regex2/pull/3
chore(package): update standard to version 14.3.0 by @Eomm in https://github.com/fastify/safe-regex2/pull/5
Bump tape from 4.13.2 to 5.0.0 by @dependabot-preview in https://github.com/fastify/safe-regex2/pull/6
Bump standard from 14.3.4 to 15.0.0 by @dependabot-preview in https://github.com/fastify/safe-regex2/pull/7
Bump standard from 15.0.1 to 16.0.1 by @dependabot-preview in https://github.com/fastify/safe-regex2/pull/9
Bump ret from 0.3.2 to 0.4.0 by @dependabot-preview in https://github.com/fastify/safe-regex2/pull/10
Move to github actions & update things by @mcollina in https://github.com/fastify/safe-regex2/pull/11
build: reduce dependabot update frequency by @Fdawgs in https://github.com/fastify/safe-regex2/pull/12
ci: use major versions of github actions by @Fdawgs in https://github.com/fastify/safe-regex2/pull/15
Bump actions/setup-node from 2 to 3 by @dependabot in https://github.com/fastify/safe-regex2/pull/16
Bump actions/checkout from 2 to 3 by @dependabot in https://github.com/fastify/safe-regex2/pull/17
Bump standard from 16.0.4 to 17.0.0 by @dependabot in https://github.com/fastify/safe-regex2/pull/18
ci!: migrate to fastify reusable workflow by @Fdawgs in https://github.com/fastify/safe-regex2/pull/19

New Contributors

@greenkeeper made their first contribution in https://github.com/fastify/safe-regex2/pull/1
@Eomm made their first contribution in https://github.com/fastify/safe-regex2/pull/5
@dependabot-preview made their first contribution in https://github.com/fastify/safe-regex2/pull/6
@mcollina made their first contribution in https://github.com/fastify/safe-regex2/pull/11
@Fdawgs made their first contribution in https://github.com/fastify/safe-regex2/pull/12
@dependabot made their first contribution in https://github.com/fastify/safe-regex2/pull/16

Full Changelog: https://github.com/fastify/safe-regex2/compare/1.1.0...v3.0.0

Open source →