Repo brief: google/re2

Generated by RepoPilot · document generated 2026-09-15 · concise human review Evidence snapshot · analyzed 2026-09-15T00:02:23.785Z · commit 972a15cedd00

Verdict

Mixed — Slowing — last commit 4mo ago

• Last commit 4mo ago
• 6 active contributors
• Distributed ownership (top contributor 49% of recent commits)
• BSD-3-Clause licensed
• 2 more receipts on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests

What it is

RE2 is a C++ regular expression library that guarantees linear-time matching on any input by using finite automata instead of backtracking. It trades some regex feature support (no backreferences or lookarounds) for absolute safety: untrusted regex patterns cannot cause catastrophic backtracking or exponential blowup. Used in production at Google since 2006, it prioritizes security and predictability over feature completeness. Multi-language polyrepo: the core C++ engine lives in /re2/ (parsed from lib/git structure), Python bindings in /python/ with _re2.cc wrapping the core, TypeScript/JavaScript web app in /app/ (including app.ts and _re2.cc wasm bindings), build system supports Bazel…

Start here

Open these first:

• re2/re2.h — Public API header defining the RE2 class and Match interface that all users and internal consumers depend on.
• re2/regexp.h — Core internal representation of parsed regular expressions; essential for understanding the compilation pipeline.
• re2/prog.h — Compiled finite automaton representation; central to execution engines (DFA, NFA, onepass).
• re2/parse.cc — Regex syntax parser that converts raw pattern strings into the internal Regexp AST; foundational for all pattern handling.
• re2/compile.cc — Compiler that transforms parsed Regexp into executable Prog bytecode; bridges AST to execution engines.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/google/re2.git
cd re2
# For C++ core:
make test
# For Python bindings:
cd python && python setup.py test
# For web WASM build:
cd app && npm install && npm run build

Daily commands:

For C++ library: make or bazel build :re2 (BUILD.bazel defines targets). For Python: pip install . from /python/ directory or cd python && python setup.py install. For WASM web app: `cd app && npm install && npm…

…shortened for this brief.

Key cautions & unknowns

• Slowing — last commit 4mo ago
• No external dependencies (intentional for safety), but this means no lock file in traditional sense—version pinning happens via Bazel WORKSPACE.bazel or CMake toolchain files, not package.json-style. The /benchlog/…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.