PHPackages                             rollerworks/password-common-list - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Validation &amp; Sanitization](/categories/validation)
4. /
5. rollerworks/password-common-list

ActiveLibrary[Validation &amp; Sanitization](/categories/validation)

rollerworks/password-common-list
================================

Password CommonList validator for Symfony

v0.4.1(5mo ago)736.3k↓49.9%2MITPHPPHP &gt;=8.0CI passing

Since Sep 29Pushed 4mo ago1 watchersCompare

[ Source](https://github.com/rollerworks/password-common-list)[ Packagist](https://packagist.org/packages/rollerworks/password-common-list)[ RSS](/packages/rollerworks-password-common-list/feed)WikiDiscussions main Synced 2d ago

READMEChangelog (6)Dependencies (8)Versions (7)Used By (0)

PasswordCommonList Validator
============================

[](#passwordcommonlist-validator)

This package provides a Symfony Validator for the [xato-net-10-million-passwords-1000000](https://github.com/danielmiessler/SecLists/tree/master/Passwords) CommonPassword list.

**Note:** It's better to use the [NotCompromisedPassword](https://symfony.com/doc/current/reference/constraints/NotCompromisedPassword.html#notcompromisedpassword)validator when possible. The PasswordCommonList should only be used when network access is limited or restricted.

**Only passwords of 6 or more characters are included in this list.**

Installation
------------

[](#installation)

To install this package, add `rollerworks/password-common-list` to your composer.json:

```
$ php composer.phar require rollerworks/password-common-list
```

Now, [Composer](https://getcomposer.org/doc/00-intro.md) will automatically download all required files, and install them for you.

**Note:** To use this library with a Symfony Application make sure the `\Rollerworks\Bundle\PasswordCommonListBundle\RollerworksPasswordCommonListBundle` is enabled.

Requirements
------------

[](#requirements)

You need at least PHP 8.0 and Symfony 6.4, mbstring is recommended but not required.

Usage
-----

[](#usage)

**Caution:**

> The password validators do not enforce that the field must have a value! To make a field "required" use the [NotBlank constraint](http://symfony.com/doc/current/reference/constraints/NotBlank.html)in combination with the PasswordCommonList validator.

Use the `Rollerworks\Component\PasswordCommonList\Validator\Constraints\NotInPasswordCommonList` constraint as described in the [Symfony Documentation](https://symfony.com/doc/current/validation.html). This constraint has no special options.

Versioning
----------

[](#versioning)

For transparency and insight into the release cycle, and for striving to maintain backward compatibility, this package is maintained under the Semantic Versioning guidelines as much as possible.

Releases will be numbered with the following format:

`..`

And constructed with the following guidelines:

- Breaking backward compatibility bumps the major (and resets the minor and patch)
- New additions without breaking backward compatibility bumps the minor (and resets the patch)
- Bug fixes and misc changes bumps the patch

For more information on SemVer, please visit .

License
-------

[](#license)

This library is released under the [MIT license](LICENSE).

Contributing
------------

[](#contributing)

This is an open source project. If you'd like to contribute, please read the [Contributing Guidelines](https://contributing.rollerscapes.net/). If you're submitting a pull request, please follow the guidelines in the [Submitting a Patch](https://contributing.rollerscapes.net/latest/patches.html) section.

###  Health Score

46

—

FairBetter than 92% of packages

Maintenance75

Regular maintenance activity

Popularity35

Limited adoption so far

Community11

Small or concentrated contributor base

Maturity50

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 87.5% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~317 days

Recently: every ~396 days

Total

6

Last Release

150d ago

PHP version history (2 changes)v0.1.0PHP &gt;=7.4

v0.4.0PHP &gt;=8.0

### Community

Maintainers

![](https://www.gravatar.com/avatar/f0e812c04e848e9cc3afe6e966d2b81e81308124d96ce5f54eff4db0f8db0ea9?d=identicon)[sstok](/maintainers/sstok)

---

Top Contributors

[![sstok](https://avatars.githubusercontent.com/u/904790?v=4)](https://github.com/sstok "sstok (21 commits)")[![gharlan](https://avatars.githubusercontent.com/u/330436?v=4)](https://github.com/gharlan "gharlan (3 commits)")

---

Tags

symfonyvalidatorpassword

###  Code Quality

TestsPHPUnit

Static AnalysisPHPStan

Type Coverage Yes

### Embed Badge

![Health badge](/badges/rollerworks-password-common-list/health.svg)

```
[![Health](https://phpackages.com/badges/rollerworks-password-common-list/health.svg)](https://phpackages.com/packages/rollerworks-password-common-list)
```

###  Alternatives

[respect/validation

The most awesome validation engine ever created for PHP

6.0k39.9M413](/packages/respect-validation)[api-platform/core

Build a fully-featured hypermedia or GraphQL API in minutes!

2.6k51.2M339](/packages/api-platform-core)[rollerworks/password-strength-validator

Password-strength validator for Symfony

1446.0M7](/packages/rollerworks-password-strength-validator)[drupal/core-recommended

Locked core dependencies; require this project INSTEAD OF drupal/core.

6942.5M421](/packages/drupal-core-recommended)[rollerworks/password-strength-bundle

Password-strength validator bundle for Symfony

1473.8M10](/packages/rollerworks-password-strength-bundle)[rcsofttech/audit-trail-bundle

Enterprise-grade, high-performance Symfony audit trail bundle. Automatically track Doctrine entity changes with split-phase architecture, multiple transports (HTTP, Queue, Doctrine), and sensitive data masking.

1189.8k](/packages/rcsofttech-audit-trail-bundle)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
