regex-syntax 0.8.10 parses regular expressions into an AST and translates them to an HIR, with #![forbid(unsafe_code)], no I/O, and one optional off-by-default dependency. Parsing, traversal, the nest-limit check, and the destructors are all iterative, so deeply nested patterns bound stack usage to a constant; repetition counts are validated as u32. No findings.