# recheck-cli
**Repository Path**: mirrors_MakeNowJust/recheck-cli
## Basic Information
- **Project Name**: recheck-cli
- **Description**: ⌨️ Regex Denial-of-Service Checker CLI
- **Primary Language**: Unknown
- **License**: MIT
- **Default Branch**: main
- **Homepage**: None
- **GVP Project**: No
## Statistics
- **Stars**: 0
- **Forks**: 0
- **Created**: 2021-12-05
- **Last Updated**: 2026-05-24
## Categories & Tags
**Categories**: Uncategorized
**Tags**: None
## README
# ⌨️ Recheck CLI
The [MakeNowJust-Labo/recheck](https://github.com/MakeNowJust-Labo/recheck) ReDoc checker in CLI form.
Just pass it a path glob and let it do the checking!
## 📑 Summary
This is a little CLI used to find Regex Denial-of-Service ([ReDos](https://en.wikipedia.org/wiki/ReDoS)) problems in your code. This can happen when a regular expression is built in a way where the time it takes to run it grows exponentially when certain input strings are used, causing the aforementioned denial-of-service.
Here we scan use the [ReCheck](https://github.com/MakeNowJust-Labo/recheck) javascript ReDos scanner to go over your glob pattern of files to test them for vulnerable RegEx patterns.
## 🖨️ Usage
In general, you just pass a path glob as the first argument, and it will scan all matching files for regexes and subsequently run those regexes through the redos checker, printing all matching vulnerable regexes at the end.
We have statically linked binaries for MacOS, Windows and Linux available in the `Releases` here on Github, just download them and run them on the commandline like so:
```bash
./recheck-cli-linux "src/**/*.js"
```
This package is also published on npm, so you can run it with `npx` without having to manually install it first.
```bash
npx recheck-cli "**/*.js"
```
You can include the `node_modules` directories (ignored by default) by passing the `-n` flag before the glob pattern.
Example Output:
```
$ /opt/ndomino/recheck-cli/cli.js 'functions/**/*.js'
recheck results:
> Go to https://makenowjust-labo.github.io/recheck/ for more details
> or if you want to double-check the matched regexes.
---
Checking 139 files...
File: functions/src/api-check-runner/src/api-check-runner.js
Unsafe Regex
- (L275) headersCopy['content-type'].match(/application\/.*\+json/) // This tackles all vendor specific json media types
- Summary: 2nd degree polynomial
File: functions/src/browser-check-common/src/Uploader.js
Unsafe Regex
- (L8) const SUPPORTED_FILE_FORMAT_REGEX = /^([a-zA-Z0-9-_@]+|\.\/)+\.(png|jpg|jpeg|pdf)$/m
- Summary: exponential
```
## 🚧 Contributing
Open to all PRs
Project by ndom91, released under MIT license.
