* Package name    : libjs-zxcvbn
  Version         : 1.0
  Upstream Author : Dan Wheeler <dan@dropbox.com>
* URL             : https://tech.dropbox.com/2012/04/zxcvbn-realistic-password-strength-estimation/
https://github.com/lowe/zxcvbn#readme
* License         : Expat
  Programming Lang: JavaScript
  Description     : realistic password strength estimation

zxcvbn tries to give sound password advice through pattern matching and
conservative entropy calculations.


I’d like to depend on this package for the upcoming owncloud 6 package.

Regards

David

package wnpp
retitle 726171 ITP: libjs-zxcvbn -- realistic password strength estimation
owner 726171 !
thanks

I have now begin packaging this library. But I am novice at packaging
ECMAScript, and could use some advice!

The VCS fields are:

VCS-bzr: http://anonscm.debian.org/bzr/collab-maint/libjs-zxcvbn/trunk/
VCS-Browser: http://anonscm.debian.org/loggerhead/collab-maint/libjs-zxcvbn/trunk/

package wnpp
block 726171 by 705565
block 726171 by 726294
thanks

The ‘libjs-zxcvbn’ source needs ‘closure-compiler.jar’ (from the
‘libclosure-compiler-java’ package) to build. But that program
currently fails to run, as detailed in bug#705565 and bug#726294.

I am looking for a sponsor for my package ‘libjs-zxcvbn’:

    Package name    : libjs-zxcvbn
    Version         : 1.0+dfsg.1-1
    Upstream Author : Dan Wheeler <dan@dropbox.com>
    URL             : https://tech.dropbox.com/2012/04/zxcvbn-realistic-password-strength-estimation/
    License         : Expat
    Section         : web

It builds these binary packages:

    libjs-zxcvbn - realistic password strength estimation — JavaScript library

You can get the package with ‘dget’:

    $ dget -x http://mentors.debian.net/debian/pool/main/l/libjs-zxcvbn/libjs-zxcvbn_1.0+dfsg.1-1.dsc

More information about ‘zxcvbn’ can be obtained from
<URL:https://mentors.debian.net/package/libjs-zxcvbn>
and in the ITP bug report <URL:http://bugs.debian.org/726171>.

Hi Ben,
[…]

Any update? Last time I checked, the packaging didn’t use actual dh
short rules, did that changed in the mean time? The VCS-Browser URL is
404, I would prefer not to set up Bazaar just to check the other one
(but can’t find /bzr/collab-maint/libjs-zxcvbn on Alioth).

I seem to recall you did a fair work to rebuild everything from scratch
with DFSG source, so that looked promising. Yet, one year and a half
seems like a long time to get the package in the archive, so what is the
status?

Regards

David

Control: tags -1 - pending
Control: retitle -1 RFP: libjs-zxcvbn -- realistic password strength estimation

I’ll assume that the lack of answer means something like “no, [something
rude]”. Holding the effort on this packaging during almost two years is
not really welcome.

Regards

David

Thank you for prompting me to look at this again! I would like to work
with you on this package, if you're willing.

That's an unfounded assumption (lack of answer should not be assumed
as hostility). Instead, the assumption should be that an honest error
was made, unless there is compelling evidence to the contrary.

Since it's also incorrect (i.e. lack of response was in this case not
due to hostility), I will undo those changes to this bug report, and
update it, by merging with another.

I'll respond to the earlier message separately.

I am looking for a sponsor for my package ‘libjs-zxcvbn’:

    Package name    : libjs-zxcvbn
    Version         : 1.0+dfsg.2-2
    Upstream Author : Dan Wheeler <dan@dropbox.com>
    URL             : https://tech.dropbox.com/2012/04/zxcvbn-realistic-password-strength-estimation/
    License         : Expat
    Section         : web

It builds these binary packages:

    libjs-zxcvbn - realistic password strength estimation — JavaScript library

You can get the package with ‘dget’:

    $ dget -x http://mentors.debian.net/debian/pool/main/libj/libjs-zxcvbn/libjs-zxcvbn_1.0+dfsg.2-2.dsc

More information about ‘zxcvbn’ can be obtained from
<URL:https://mentors.debian.net/package/libjs-zxcvbn>
and in the ITP bug report <URL:http://bugs.debian.org/726171>.

This release contains the following significant changes:

  * Updated re-pack of upstream source, this time preserving source
    data files.
  * Add copyright information for source data files.
  * Cached data files are source, don't clobber them.
  * Assist build reproducibility through options to ‘tar’.
  * Updated VCS URL fields.

Thanks to Eriberto Mota <eriberto@debian.org> and David Prévot
<taffit@debian.org> for feedback on earlier releases of this package.

The package build is idiosyncratic and needs some special handling,
but Debhelper ‘dh $@’ is certainly used throughout for all actions.

Thanks. Fixed now in the latest release to Mentors
<URL:https://mentors.debian.net/package/libjs-zxcvbn>.

Still awaiting a sponsor; hopefully, one who knows enough about
packaging JavaScript in Debian to confirm I've not broken anything.

package wnpp
retitle 726171 ITP: libjs-zxcvbn -- realistic password strength
estimation
owner 726171 -1
thanks

I will refresh the package and upload it myself.

Hello,

Bug #726171 in zxcvbn.js reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/js-team/zxcvbn.js/-/commit/2f6dfd8adc35ffe98acb6e775e0717ea6cf65373
------------------------------------------------------------------------
initial packaging for Debian

Closes: #726171
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/726171

We believe that the bug you reported is fixed in the latest version of
zxcvbn.js, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 726171@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Joseph Nahmias <jello@debian.org> (supplier of updated zxcvbn.js package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 16 Jul 2026 00:15:22 -0400
Source: zxcvbn.js
Binary: libjs-zxcvbn node-zxcvbn
Architecture: source all
Version: 4.4.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Joseph Nahmias <jello@debian.org>
Description:
 libjs-zxcvbn - low-budget password strength estimation - JSlib
 node-zxcvbn - low-budget password strength estimation - Node.js
Closes: 726171
Changes:
 zxcvbn.js (4.4.2-1) unstable; urgency=medium
 .
   * Initial release (Closes: #726171)
Checksums-Sha1:
 5f8b857183bca86cc6329e91c226cdc2c0e4c4e9 3659 zxcvbn.js_4.4.2-1.dsc
 e23b2996192c7f1ccee5d2f4eb338e8932857f9c 2841587 zxcvbn.js_4.4.2.orig.tar.gz
 35c9f487b9b7f9f96e9d9e579f3e13ba5f8240cd 9600 zxcvbn.js_4.4.2-1.debian.tar.xz
 56d230c62a3191e2acbb8ba041cbfd2558ffcd27 392372 libjs-zxcvbn_4.4.2-1_all.deb
 2f567811c28bf081cc88f9db29cc1f569daed475 399456 node-zxcvbn_4.4.2-1_all.deb
 e97053680b9a9eb4542d54c4a279dd34c4904cc0 19028 zxcvbn.js_4.4.2-1_amd64.buildinfo
Checksums-Sha256:
 1d1773f078f4f183d6e17744ad5b2395cec809d23febf1cd2cb2d02a3611b6f9 3659 zxcvbn.js_4.4.2-1.dsc
 1c469c083c714ce42b0bedc37eb32be996358a60ed171523ff15a55f357cc476 2841587 zxcvbn.js_4.4.2.orig.tar.gz
 74aa23cd7ea31697823ce58200fe2572bf502c9bb09bba7365bf1b409151458a 9600 zxcvbn.js_4.4.2-1.debian.tar.xz
 d07fe98434b841cc418a0bf5a74892135847cd5f488e4616501c176922eb46ae 392372 libjs-zxcvbn_4.4.2-1_all.deb
 38fd46ff3b3c9dce8536f54a7c62a907417b861e0463484e106eac410e3346e1 399456 node-zxcvbn_4.4.2-1_all.deb
 6d4d834c9f1060db48195a481d37f7d165b0437fac758af04864e64b2b20cc7c 19028 zxcvbn.js_4.4.2-1_amd64.buildinfo
Files:
 527c82fc19f987626c72d7c334a85a97 3659 javascript optional zxcvbn.js_4.4.2-1.dsc
 5ed8b138f0b31abf11b22a92678b0c8a 2841587 javascript optional zxcvbn.js_4.4.2.orig.tar.gz
 d49107f7d655ff42d4159fc80449439e 9600 javascript optional zxcvbn.js_4.4.2-1.debian.tar.xz
 03d506d9d84c6540018168487d2ef376 392372 javascript optional libjs-zxcvbn_4.4.2-1_all.deb
 b95719fcbe0b7752667c29b6acc58c11 399456 javascript optional node-zxcvbn_4.4.2-1_all.deb
 d544485a7e4c423518ee6b40cd860a85 19028 javascript optional zxcvbn.js_4.4.2-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEcxc7CTsDz7hRCK0UsRvZGQeaO5gFAmpYXvgACgkQsRvZGQea
O5jbxQ//bLHZpTz4Y1odxqq7Tj5zTt9hxVMvm2vSqaN3QhyvKVzSqUMMR9CQ/cWc
BVVacqeWynAfJmlbQ9r6PQQXSlSltY/Ns62ezsc6AF/kM3MnxmMlxajH9pavKRdl
QaQNoYAMlZZYEK776EBZ625wlVhSE5js7s9v0j8IRAvKKpjPeKsqqX4/ZNfCAQ3N
XCAXpOeiH5rRzE2QLygzNHgQeM6Dw2SoqNM6kikGwKbWxTT7w8poAUFOnmoKcxHV
xyYUvaQuLTL/HZrNRvpiblmA8oS2yQvnoDDuNslgs8bZa4ByeOk500XFARvVPjS7
lvdF2WIQ26YQQ74Uh/wpU4yGCR/8sS3n0puD37dlMaOOStva34i8izp+LXoKyAC0
QLnR3pPDF9B990rQQMTvhOInyZhL7eIon8Syx5z/Bpz1J68TLiDVj93RwADdmLgK
M+DmqKljY6waHhrGCMNn+Eg0tUfZTu4DfUlG56vmgjNr/S0f8tgCTnehOMUBDfrI
OrE3L+V1xex+uVe1HTdwLXDj3Y2Qo0SoW6eGK9plRzoDuQxa60Ef/wFatJdatEFV
NKqsK/55ge7B+zmaklXiu8wTZ8hLp3tGOSt5Kc2OgdLY7h7URZceg4JBoUab9kDG
n8Bxj8G2ob91IjNhhQJJBpRhfipWdcEgdCle9H3Ggag2tcHSnp0=
=LTwX
-----END PGP SIGNATURE-----