How I Audit JavaScript Regexes for Catastrophic Backtracking

I maintain CodeSwap, a developer-tools site with browser-based utilities and technical guides. While reviewing its regular-expression tools, I wanted a repeatable answer to a deceptively simple question: How can I tell whether a regex is merely slow or capable of pinning a CPU with a tiny hostile input? The answer was not another list of patterns...