Limit digit matches to mitigate ReDoS vulnerabilities

[maxcbc]

• Replaced use of \d+ with \d{0,16}

This should in theory go some way to mitigate ReDoS issues listed in #10 by limiting the number of matches to the length of the MAX_SAFE_INTEGER.

[tiffon]

Thanks for creating this PR! 🎉

One comment: The \d{0,16} should be \d{1,16} in order to approximate the \d+ as opposed to \d*.

console.log([
null === ':::'.match(/^(\d+):(\d+):(\d+):(\d+)(\.\d+)?/),
null === ':::'.match(/^(\d{0,16}):(\d{0,16}):(\d{0,16}):(\d{0,16})(\.\d{0,16})?/),
null === ':::'.match(/^(\d{1,16}):(\d{1,16}):(\d{1,16}):(\d{1,16})(\.\d{1,16})?/),
])
// -> [true, false, true]

@indexzero Any chance this can get republished after the above adjustment is made?