dsh-pass-strength

Password-strength checking is a must for any login or admin panel, yet most teams either hand-rolled a stack of regex rules or called an external API, adding fragility and an extra network hop. dsh-pass-strength removes both: it runs entirely inside your local session, scores the password against parameters you define, and returns concrete, actionable suggestions rather than a vague composite number.

The core feature is the pass_strength tool. It is a pure Node implementation with zero network dependencies, so every calculation finishes on the spot. You can tune dimensions such as length, character-class coverage, and common-weak-password lists to match your own security policy instead of being locked into a one-size-fits-all standard.

Who is it for? Developers who need quick in-session password validation without spinning up an extra HTTP service, or who simply do not want another SDK on the dependency graph, can drop this plugin straight into their workflow. Security engineers and ops admins who fold audit steps into automation scripts will also find it handy. MIT licensed, no commercial strings attached.