TextMate language grammars, the de facto standard for syntax highlighting, are defined in terms of regular expressions that must be matched using Oniguruma's engine for compatibility—TextMate itself used Oniguruma, and its quirks have become an implicit part of the standard. I wonder if the project will be forked to fix things like security issues given its wide use in this context.