Tootfinder

from my link log —
All longest regex matches in linear time is possible.
https://iev.ee/blog/all-longest-regex-matches-in-linear-time/
saved 2026-03-17

finding all regex matches has always been O(n²). even in the engines built to prevent it
every regex engine that promises linear time breaks that promise the moment you ask for all matches. the problem has been there since the 70s, hiding in plain sight.
— by ian erik varatalu
🤔 https://iev.ee/blog/the-…

⚡ What triggered it: GitHub rolled out a new token format for GitHub App installation tokens: ghs__. Base64url encoding uses - chars, which Composer's 2021-era regex didn't permit. Any such token would fail validation and leak.
😱 Making it worse: GitHub Actions' secret masker failed to redact the token. Symfony Console wraps error output with ANSI sequences, bypassing masking. Popular actions like shivammathur/setup-php auto-register GITHUB_TOKEN — no special config needed …

I’ve been messing around with Apple Shortcuts lately and was pleased to see that Regular Expressions are supported.

Class too large (too many methods)
− 1 file
🟡 Design / code quality
Duplicate literals − should be constants
− ~7 files
Duplicate / suspicious code blocks
− 1 file
🟢 Minor / low-level issues
Regex improvements
− ~4 files
Redundant / unnecessary code (e.g. temp vars, inherited method)
− ~3 files

Finally a package where I can't suspect the author of vibecoding!
"""
Version: 2026.3.32
Fixed segfault.
Version: 2026.3.31
Fixed bug again.
Version: 2026.3.30
Fixed bug.
"""
https://github.com/mrabarnett/mrab-regex/blob/5d51c75da03116e08bb6fb537fae6d8c804cc92c/changelog.txt
(It's also a horribly bad package, with tons of unmaintainable code, heavily relying on CPython internals.)

from my link log —
What 127.5 million forms can tell you about the state of front-end regex input validation on the Web.
https://amandastjerna.se/blog/127-million-forms/
saved 2026-03-02

🧠 Bidirectional token-classification — unlike autoregressive LLMs, #PrivacyFilter reads input from both directions simultaneously for deeper context awareness, catching subtle #PII that simple pattern-matching or RegEx rules miss
⚡ 1.5B parameter model with only ~50M active parameters …