dwolfhub/zxcvbn-python

Is it abandoned project?

stalkerg opened this issue · 4 comments

stalkerg commented

@dwolfhub sorry for tagging you but seems like we should know your plans.
Because a such project tied with security I think it dangerous use it without releases in last 4 years.

As I understand should be next changes:

  1. Support new pythons up to 3.13 (ci, builds)
  2. Drop python up to 3.8 (especial 2.7)
  3. Probably move CI to GitHub.
  4. Add type hints.
  5. Fix security flaws - #70
  6. Fix performance and etc like in #72
  7. Word's list should be extended by local countries words (it's still alphabet but not English)

Because a such lib used in many other projects, I suppose it's important. Originally it was made (ported) by @gvanrossum when he worked in DropBox, maybe we can ask him what to do next.

gvanrossum commented

I was never involved in this project and have no plans for it.

stalkerg commented

My apologize, I made this assumption base on https://github.com/dropbox/python-zxcvbn
(it's still not archive however)

petterreinholdtsen commented

Would be nice to know what the plan is to know what to do with the Debian package, https://tracker.debian.org/pkg/python-zxcvbn.