Ross ROSS = Recommend OSS · open-source software intelligence for agents

dropbox/zxcvbn

Low-Budget Password Strength Estimation observed · 2026-08-28

github.com/dropbox/zxcvbn · homepage · CoffeeScript · MIT (permissive) observed · 2026-08-28

Health v2 · maintenance only

23/100

  • Activity 0
  • Release rhythm 8
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 5300
  • days_rel: n/a
  • days_push: 744
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

16037 stars · 996 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

zxcvbn is a JavaScript password strength estimator inspired by password crackers, using pattern matching and conservative estimation against common passwords, words, dates, keyboard patterns, and l33t speak. It provides realistic guessability scores plus targeted verbal feedback as an alternative to rigid password composition rules.

Use cases

  • estimate password strength realistically in a signup form
  • replace password composition rules with a complexity score
  • give users instant feedback on weak passwords
  • detect common passwords and keyboard patterns like qwerty
  • score passphrase strength based on word rarity

When to choose

  • you need client-side password strength metering with no server round-trip
  • you want to replace LUDS composition policies with a research-backed estimator

When to avoid

  • you need server-side strength checks in a non-JavaScript stack without a port
  • you need cryptographic key-strength validation rather than user-facing feedback

Facets

library · maturity maintenance

security auth security web-development browser cross-platform password-strength entropy-estimation coffeescript nodejs

4 sources

Member repositories

RepositoryRoleHealth v2
dropbox/zxcvbnmain23

For agents

markdown · JSON · MCP: product_card(name="dropbox/zxcvbn")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem