#800897 RFP: libjs-zxcvbn -- realistic password strength

Package:
wnpp
Source:
wnpp
Submitter:
Luke Faraone
Date:
2026-07-16 08:13:02 UTC
Severity:
wishlist
Tags:
#800897#5
Date:
2015-10-04 17:31:26 UTC
From:
To:
* Package name    : zxcvbn.js
  Version         : 3.5.0
  Upstream Author : Dan Wheeler <dan@dropbox.com>
* URL             : https://github.com/dropbox/zxcvbn
* License         : Expat
  Programming Lang: JavaScript
  Description     : JavaScript password strength estimator

zxcvbn is a password strength estimator inspired by password crackers.
Through pattern matching and conservative entropy calculations, it
recognizes and weighs 10k common passwords, common names and surnames
according to US census data, popular English words, and other common
patterns like dates, repeats (aaa), sequences (abcd), keyboard patterns
(qwertyuiop), and l33t speak.

Motiviation for the design can be found detailed at:
   <http://tech.dropbox.com/?p=165>

zxcvbn detects and supports CommonJS (node, browserify) and AMD
(RequireJS). In the absence of those, it adds a single function
zxcvbn() to the global namespace.

NB: This is my first time packaging a JavaScript/AMD/Node package,
so I will probably be reaching out to the Debian JS maintainers for
help :)

#800897#10
Date:
2015-10-04 19:51:38 UTC
From:
To:
Control: forcemerge 726171 -1

Thanks for the interest in packaging this library.

I have packaged it and am awaiting a sponsor, see Bug#726171 and
Bug#747032. I look forward to working with you on this!

#800897#55
Date:
2026-07-16 08:10:21 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
zxcvbn.js, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 726171@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Joseph Nahmias <jello@debian.org> (supplier of updated zxcvbn.js package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 16 Jul 2026 00:15:22 -0400
Source: zxcvbn.js
Binary: libjs-zxcvbn node-zxcvbn
Architecture: source all
Version: 4.4.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Joseph Nahmias <jello@debian.org>
Description:
 libjs-zxcvbn - low-budget password strength estimation - JSlib
 node-zxcvbn - low-budget password strength estimation - Node.js
Closes: 726171
Changes:
 zxcvbn.js (4.4.2-1) unstable; urgency=medium
 .
   * Initial release (Closes: #726171)
Checksums-Sha1:
 5f8b857183bca86cc6329e91c226cdc2c0e4c4e9 3659 zxcvbn.js_4.4.2-1.dsc
 e23b2996192c7f1ccee5d2f4eb338e8932857f9c 2841587 zxcvbn.js_4.4.2.orig.tar.gz
 35c9f487b9b7f9f96e9d9e579f3e13ba5f8240cd 9600 zxcvbn.js_4.4.2-1.debian.tar.xz
 56d230c62a3191e2acbb8ba041cbfd2558ffcd27 392372 libjs-zxcvbn_4.4.2-1_all.deb
 2f567811c28bf081cc88f9db29cc1f569daed475 399456 node-zxcvbn_4.4.2-1_all.deb
 e97053680b9a9eb4542d54c4a279dd34c4904cc0 19028 zxcvbn.js_4.4.2-1_amd64.buildinfo
Checksums-Sha256:
 1d1773f078f4f183d6e17744ad5b2395cec809d23febf1cd2cb2d02a3611b6f9 3659 zxcvbn.js_4.4.2-1.dsc
 1c469c083c714ce42b0bedc37eb32be996358a60ed171523ff15a55f357cc476 2841587 zxcvbn.js_4.4.2.orig.tar.gz
 74aa23cd7ea31697823ce58200fe2572bf502c9bb09bba7365bf1b409151458a 9600 zxcvbn.js_4.4.2-1.debian.tar.xz
 d07fe98434b841cc418a0bf5a74892135847cd5f488e4616501c176922eb46ae 392372 libjs-zxcvbn_4.4.2-1_all.deb
 38fd46ff3b3c9dce8536f54a7c62a907417b861e0463484e106eac410e3346e1 399456 node-zxcvbn_4.4.2-1_all.deb
 6d4d834c9f1060db48195a481d37f7d165b0437fac758af04864e64b2b20cc7c 19028 zxcvbn.js_4.4.2-1_amd64.buildinfo
Files:
 527c82fc19f987626c72d7c334a85a97 3659 javascript optional zxcvbn.js_4.4.2-1.dsc
 5ed8b138f0b31abf11b22a92678b0c8a 2841587 javascript optional zxcvbn.js_4.4.2.orig.tar.gz
 d49107f7d655ff42d4159fc80449439e 9600 javascript optional zxcvbn.js_4.4.2-1.debian.tar.xz
 03d506d9d84c6540018168487d2ef376 392372 javascript optional libjs-zxcvbn_4.4.2-1_all.deb
 b95719fcbe0b7752667c29b6acc58c11 399456 javascript optional node-zxcvbn_4.4.2-1_all.deb
 d544485a7e4c423518ee6b40cd860a85 19028 javascript optional zxcvbn.js_4.4.2-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEcxc7CTsDz7hRCK0UsRvZGQeaO5gFAmpYXvgACgkQsRvZGQea
O5jbxQ//bLHZpTz4Y1odxqq7Tj5zTt9hxVMvm2vSqaN3QhyvKVzSqUMMR9CQ/cWc
BVVacqeWynAfJmlbQ9r6PQQXSlSltY/Ns62ezsc6AF/kM3MnxmMlxajH9pavKRdl
QaQNoYAMlZZYEK776EBZ625wlVhSE5js7s9v0j8IRAvKKpjPeKsqqX4/ZNfCAQ3N
XCAXpOeiH5rRzE2QLygzNHgQeM6Dw2SoqNM6kikGwKbWxTT7w8poAUFOnmoKcxHV
xyYUvaQuLTL/HZrNRvpiblmA8oS2yQvnoDDuNslgs8bZa4ByeOk500XFARvVPjS7
lvdF2WIQ26YQQ74Uh/wpU4yGCR/8sS3n0puD37dlMaOOStva34i8izp+LXoKyAC0
QLnR3pPDF9B990rQQMTvhOInyZhL7eIon8Syx5z/Bpz1J68TLiDVj93RwADdmLgK
M+DmqKljY6waHhrGCMNn+Eg0tUfZTu4DfUlG56vmgjNr/S0f8tgCTnehOMUBDfrI
OrE3L+V1xex+uVe1HTdwLXDj3Y2Qo0SoW6eGK9plRzoDuQxa60Ef/wFatJdatEFV
NKqsK/55ge7B+zmaklXiu8wTZ8hLp3tGOSt5Kc2OgdLY7h7URZceg4JBoUab9kDG
n8Bxj8G2ob91IjNhhQJJBpRhfipWdcEgdCle9H3Ggag2tcHSnp0=
=LTwX
-----END PGP SIGNATURE-----