hot take: regex is fine, actually, and most of the jokes about it being a problem are just Regex Strings Look Scary disguised as technical complaints.
super spicy take: shipping source, build systems, and containers (especially for ephemeral uses) instead of just shipping a compiled binary is a waste of electricity and arguments for the containerised delivery approach are not very compelling in practice unless you work for a cloud vendor.
@gsuberland While this is true this ignores the goal of most packaging. Security checks / quality control does need the source too.