zxcvbn
v3.1.0 GrowingAn entropy-based password strength estimator, originally for Javascript by Dropbox.
Quick Verdict
- ✕Not updated for 1+ year
- ✓Stable API (3.x for 9+ years)
- ✓Trusted by 525 crates
- ✓Permissive license (MIT)
Security
Deep Insights
766.9K downloads in the last 30 days (25.6K/day), up 41% from the previous period.
525 crates depend on zxcvbn. Reasonable ecosystem adoption, though not yet a core dependency.
The API has been stable (1.x) for over 9 years with 29 releases. This level of maturity means you can depend on it without worrying about breaking changes.
Notable dependents include async-graphql, broker, genpass, sos, bitwarden-core. When high-quality crates choose zxcvbn, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Version Adoption
Release Timeline
Feature Flags
default =["builder"]
