Different score for the password strength for the same string between TypeScript and Java versions
Nobody has claimed this yet.
- Dominant language
- CoffeeScript
- Stars
- 16.1k
- Forks
- 1k
- PR merge metrics
- No merged PRs in 30d
Description
Hi.
I'm using **zxcvbn** libraries on back-end and front-end of an app.
For front-end: https://github.com/zxcvbn-ts/zxcvbn
For back-end: https://github.com/nulab/zxcvbn4j
The password strength score returned for the same password string, "**Tiger@0177**" is different for both the libraries. For TS version, it returns 3 (Strong) while for Java version, it returns 2 (Weak), which is giving a very bad UX for my users.
Can you suggest something why is this happening and is there a way to fix this issue? TIA.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the reported score difference for "Tiger@0177" using the TypeScript and Java zxcvbn libraries named in the issue. Compare their scoring behavior and inputs to identify the mismatch, then verify that any compatibility change produces the same result in both implementations.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- coffeescript, java, typescript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100