Is it abandoned project?

[stalkerg]

@dwolfhub sorry for tagging you but seems like we should know your plans.
Because a such project tied with security I think it dangerous use it without releases in last 4 years.

As I understand should be next changes:

1. Support new pythons up to 3.13 (ci, builds)
2. Drop python up to 3.8 (especial 2.7)
3. Probably move CI to GitHub.
4. Add type hints.
5. Fix security flaws - DOS exploit #70
6. Fix performance and etc like in Memory usage awareness: recommend late import #72
7. Word's list should be extended by local countries words (it's still alphabet but not English)

Because a such lib used in many other projects, I suppose it's important. Originally it was made (ported) by @gvanrossum when he worked in DropBox, maybe we can ask him what to do next.

[gvanrossum]

I was never involved in this project and have no plans for it.

[stalkerg]

My apologize, I made this assumption base on https://github.com/dropbox/python-zxcvbn
(it's still not archive however)

[petterreinholdtsen]

Would be nice to know what the plan is to know what to do with the Debian package, https://tracker.debian.org/pkg/python-zxcvbn.

[bgermann]

Possible replacement: https://github.com/fief-dev/zxcvbn-rs-py