zxcvbn
v3.1.1 StableAn entropy-based password strength estimator, originally for Javascript by Dropbox.
Quick Verdict
- ✓Actively maintained (updated 31d ago)
- ✓Stable API (3.x for 9+ years)
- ✓Trusted by 562 crates
- ✓Permissive license (MIT)
Security
Deep Insights
559.1K downloads in the last 30 days (18.6K/day). Volume is roughly flat compared to the previous period.
562 crates depend on zxcvbn. Reasonable ecosystem adoption, though not yet a core dependency.
The primary maintainer publishes 52 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
The API has been stable (1.x) for over 9 years with 30 releases. This level of maturity means you can depend on it without worrying about breaking changes.
Notable dependents include async-graphql, broker, genpass, sos, bitwarden-core. When high-quality crates choose zxcvbn, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Version Adoption
Release Timeline
Feature Flags
default =["builder"]
