Somebody asked if Roundup supported Have I been Powned (https://haveibeenpwned.com/)
using the password API:

  https://haveibeenpwned.com/API/v3

It doesn't but along the lines of https://wiki.roundup-tracker.org/TestPasswordComplexity
a similar mechanism can use:

 https://pypi.org/project/pyhibp/

to get a password check.

Also adding support for specifying an API key (https://haveibeenpwned.com/API/Key) in:

  detectors/config.ini

for the tracker allows use of checks for the email address(es) of the user that can be
done in a detector.