Regular Expression Denial of Service (ReDoS) in JS & PHP: Spotting Catastrophic Backtracking

Here is a pattern I keep finding in slug and username validators: /^([a-z0-9]+-?)+$/. It looks...