Skip to content

Releases: gazzycodes/redos

redos v0.1.0 — catastrophic-backtracking (ReDoS) detector

Choose a tag to compare

@gazzycodes gazzycodes released this 10 Jun 10:42

redos finds regular expressions vulnerable to catastrophic backtracking (ReDoS) in your Python code — statically, without importing or running it.

It parses each literal pattern and flags the two classic causes of exponential backtracking: nested quantifiers like (a+)+ and ambiguous alternation under a repeat like (a|a)+. Tuned for a low false-positive rate, with text and JSON output, CI-friendly exit codes, and a pre-commit hook.

Install: pip install redos