Some version of zxcvbn that I could make work with Node.js was used for testing.

Passwords from tops of Rockyou leak allowed by policy:

   1021 tequieromucho
    824 evanescence
    626 diciembre
    573 septiembre
    524 klapaucius
    408 contraseƱa
    340 tekieromucho
    324 ichliebedich
    321 dumnezeu
    316 tekieromuxo