lgtm,codescanning
* The `js/polynomial-redos` query now flags uses of expensive regular expressions where the source is library input.