password-breach-exposure@1.0.0

Publisher claims: "Use after any major data-breach headline or when auditing which of your accounts are compromised — checks passwords against the Have I Been Pwned breach corpus using k-anonymity (only a 5-character SHA-1 prefix ever leaves the machine), maps each hit to what the breach actually leaked (passwords vs contact info vs payment), and produces a severity-ranked rotation queue with credential-stuffing blast-radius math instead of a vague "change everything."" Observed in sandbox: no network, touches nothing outside the project, writes no memory.