zxcvbn
zxcvbn copied to clipboard
trustelem
Go implementation of Dropbox's zxcvbn realistic password strength estimator
The original dropbox/zxcvbn library has aged considerably. Do you have any opinions around remaining faithful to v4.4.2 (circa 2017) or pinning to a new client-side reference implementation if community momentum...
When a combining diacritic character is repeated in consecutive runes, the `PasswordStrength` function gives a score of 0. For example the string below where the \u0300 rune appears twice after...
Would you be willing to accept a PR that replaces the use of regexp2 with a simple parser or similar? Right now it is used for checking for repeated strings...
It looks like there is a copy/paste error where devorak has the same `shiftedChars` as QWERTY.
Proposing use of `ASCIISet` instead of `map[byte]bool`. `ASCIISet` is a zero-dependency library for sets of ASCII characters with [28 times faster lookup speed](https://github.com/elliotwutingfeng/asciiset#results) than `map[byte]bool`.
It seems like the repetition matcher fails to identify repetitions when composed of special UTF-8 characters like `ü`, for example. Here is an example code snippet demonstrating the issue. ```go...
