passwordComplexity.validate = password => {
  const response = passwordStrength(password, passwordComplexityOptions)
  return !(response.id === 0 || response.id === 1)
}
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.