A trustworthy ReDoS (Regular Expression Denial of Service) checker for identifying vulnerable regex patterns.
recheck is a specialized tool designed to detect ReDoS (Regular Expression Denial of Service) vulnerabilities in regex patterns. It provides reliable analysis to help developers identify and fix regex that could lead to catastrophic backtracking and performance issues.
Developers and security engineers working with regular expressions in Scala or JavaScript/TypeScript projects who need to ensure regex security and performance.
Developers choose recheck for its trustworthy analysis with minimized false positives, proven algorithms, and multi-language support as both a Scala library and a JavaScript/TypeScript package.
The trustworthy ReDoS checker
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Uses proven algorithms to minimize false positives and provide accurate ReDoS reports, as emphasized in its description of reliable analysis and trustworthy checking.
Available as both a Scala library via Maven and a JavaScript/TypeScript package via npm, offering flexibility for different tech stacks, as shown in the README badges.
Maintains accuracy through extensive CI testing and code coverage monitoring, ensuring the tool remains dependable, highlighted by the CI and Codecov badges in the README.
Can be seamlessly added to projects using standard package managers like Maven and npm, facilitating adoption without complex setup, as indicated by the availability on central repositories.
Only supports Scala and JavaScript/TypeScript, excluding other popular languages like Python or Ruby where regex is widely used, which restricts its applicability in polyglot projects.
Focused on static analysis during development or CI, not designed for monitoring regex performance in live environments, limiting its use for ongoing security in production.
Being a library or CLI tool, it may not be accessible for users who prefer visual tools for security audits, potentially increasing the learning curve for non-developers.