Adds the notpwned validation rule to check passwords against the HIBP Pwned Passwords service
20%
Total Score
critical
Unfit to use: this package is deprecated and has a named replacement, winter/wn-pwnedpasswords-plugin.
Packagist marks the package abandoned at package scope and names winter/wn-pwnedpasswords-plugin as its replacement. A developer should adopt the replacement rather than start a dependency on this release.
The package has only five releases, all published within the same day, and is 35 days old. That shows recent activity but provides little evidence of an established maintenance track record.
The linked repository is owned by the Winter CMS organization, but neither its name nor README mentions the assessed luketowers/oc-pwnedpasswords-plugin package; the README instead documents the renamed package, making the linkage less direct.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.