[X] Information has been included about the website's requirements (eg. screenshots, error messages, steps during experimentation, etc.)
[X] The PR isn't documenting something that would be a common practice among password managers (e.g. minimal length of 6)
Here is a screenshot of the Kennedy Center website with its password rules.
Their explanation text is incomplete.
The site also requires a lower-case letter, I think it is just implied. Their actual password validation regex is ^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&#])[A-Za-z\d@$!%*?&#]{8,}$. You can see that one of the criteria is [a-z].
Overall Checklist
for password-rules.json
Here is a screenshot of the Kennedy Center website with its password rules.
Their explanation text is incomplete.
The site also requires a lower-case letter, I think it is just implied. Their actual password validation regex is
^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&#])[A-Za-z\d@$!%*?&#]{8,}$. You can see that one of the criteria is[a-z].