I built a 3KB alternative to replace zxcvbn (389KB) without detection loss

Описание и применение

Passcore – 3 КБ‑модуль оценки сложности пароля, заменяющий 389 КБ zxcvbn без потери точности. Он быстрее загружается, быстрее оценивает пароли и улучшает показатели Core Web Vitals.

Задача

zxcvbn, the most widely used password strength estimator, is 389 KB gzipped, unmaintained since 2017, and adds noticeable load time to registration pages, hurting UX and conversion.

Результат

passcore delivers the same 98.4 % detection rate as zxcvbn while shrinking the bundle size by 130×, speeding up load and evaluation times, and improving Core Web Vitals scores.

Рабочий процесс

• 1. Install passcore via npm: npm i passcorelib.
• 2. Import the library: import { passcore } from 'passcorelib';.
• 3. Replace zxcvbn calls: const { score } = passcore(password);.
• 4. Update UI to use the returned score and warning fields.
• 5. Test on existing forms to ensure functionality and UX remain unchanged.

Доказательства

passcore loads in ~0.2 ms. It evaluates a password in ~2,600 nanoseconds.

Источник

98.4% detection rate on real breach data, same as zxcvbn.

Источник