crunchy

Changes:

• Reduced memory footprint
• Set default timeout for (optional) HTTP calls to haveibeenpwned.com

Finds common flaws in passwords. Like cracklib, but written in Go.

Detects:

• Empty passwords: ErrEmpty
• Too short passwords: ErrTooShort
• Too few different characters, like "aabbccdd": ErrTooFewChars
• Systematic passwords, like "abcdefgh" or "87654321": ErrTooSystematic
• Passwords from a dictionary / wordlist: ErrDictionary
• Mangled / reversed passwords, like "p@ssw0rd" or "drowssap": ErrMangledDictionary
• Hashed dictionary words, like "5f4dcc3b5aa765d61d8327deb882cf99" (the md5sum of "password"): ErrHashedDictionary

Features:

• Optional hash checks against the haveibeenpwned.com database
• Use Go modules

Features:

• Rate(password) method to rate a password's strength

Fixes:

• Use UTF8 rune decoding
• Count unique chars case-insensitively