Why ECMAScript specifically
It's the regex you'll actually deploy. Node.js, every browser, and Deno all share the same engine. If your pattern works here, it works in production JavaScript. PCRE is more powerful but you can't use it in a client-side validator.