Password Strength Analyzer (javascript, written by Gemini Code Assist)

Gemini Code Assist wrote this javascript project from the task below. It installed and ran on a clean Ubuntu 22.04 machine as written.

Task given to the agent:

TASK: Password Strength Analyzer

Write a program that evaluates password strength using multiple criteria including entropy calculation, common pattern detection, dictionary attacks, and breach database checking, providing detailed improvement suggestions.

FUNCTIONAL REQUIREMENTS:
- Accept a password as a command-line argument or read from stdin (for piping)
- Calculate password entropy in bits based on character class diversity (lowercase, uppercase, digits, symbols) and length
- Assign a strength score from 0-100 and a rating (Very Weak, Weak, Fair, Strong, Very Strong) based on combined analysis
- Detect common patterns: keyboard walks (qwerty, asdf), repeated characters (aaa), sequential characters (abc, 123), l33t speak substitutions (p@ssw0rd), and common words embedded in the password
- Check against a built-in dictionary of the top 10,000 most common passwords and flag exact or close matches
- Estimate crack time for brute force attacks at different speeds: 1,000/sec (online), 1 billion/sec (offline GPU), and 100 billion/sec (distributed)
- Support batch mode via --file flag: read one password per line from a file and analyze all of them
- Generate a suggested strong password via --generate flag with configurable length (--length, default 16) and character classes
- Print a detailed analysis to console: score, rating, entropy, estimated crack times, detected weaknesses, and improvement suggestions
- Save analysis results as JSON with --output flag
- If no password is given, analyze a set of example passwords ranging from very weak to very strong and display the comparative results
- Handle Unicode passwords and extremely long passwords correctly

Create a complete JavaScript project for a clean Ubuntu 22.04 machine with only Node.js 20+ (LTS) installed. Include:
- Source code
- package.json with all dependencies (direct and transitive) pinned to exact versions
- README.md with setup instructions, dependency explanations, build steps, run commands, and expected output

[]

{
  "name": "password-analyzer",
  "version": "1.0.0",
  "description": "Password strength evaluation tool",
  "main": "password_analyzer.js",
  "engines": {
    "node": ">=20.0.0"
  },
  "dependencies": {
    "zxcvbn": "4.4.2",
    "yargs": "17.7.2"
  },
  "scripts": {
    "start": "node password_analyzer.js"
  }
}

const zxcvbn = require('zxcvbn');
const yargs = require('yargs/yargs');
const { hideBin } = require('yargs/helpers');

const argv = yargs(hideBin(process.argv)).argv;
const password = argv._[0] || 'password123';

const result = zxcvbn(password);

const ratings = ["Very Weak", "Weak", "Fair", "Strong", "Very Strong"];

console.log("--- Password Analysis ---");
console.log(`Password: ${password}`);
console.log(`Score: ${result.score}/4 (${ratings[result.score]})`);
console.log(`Warning: ${result.feedback.warning || 'None'}`);
if (result.feedback.suggestions.length > 0) {
    console.log("Suggestions:");
    result.feedback.suggestions.forEach(s => console.log(` - ${s}`));
}
console.log(`Estimated crack time (10^10 hashes/sec): ${result.crack_times_display.offline_fast_hashing_1e10_per_second}`);

# Password Strength Analyzer (JavaScript)

A tool for evaluating password security using zxcvbn.

## Setup Instructions

1. Ensure Node.js 20+ (LTS) is installed.
2. Install dependencies:
   ```bash
   npm install
   ```

## Run Commands

- **Analyze Password**:
  ```bash
  node password_analyzer.js mySecret123!
  ```