To whom it may concern: I believe there are REDOS vulnerabilities in this project. I contacted the maintainer @balpha in February and have received no response so far.