lgtm,codescanning The js/polynomial-redos query now flags uses of expensive regular expressions where the source is library input.