How I Audit JavaScript Regexes for Catastrophic Backtracking

A maintainer's reproducible process for finding, measuring, and repairing regex denial-of-service risks without inventing security claims.