Password Strength Validator

import hashlib, httpx, re

def check_password(pwd: str) -> dict:
    issues = []
    if len(pwd) < 12:       issues.append("Too short (min 12 chars)")
    if not re.search(r"[A-Z]", pwd): issues.append("Missing uppercase letter")
    if not re.search(r"\d",   pwd):  issues.append("Missing digit")
    if not re.search(r"[!@#$%^&*]", pwd): issues.append("Missing special char")
    sha1 = hashlib.sha1(pwd.encode()).hexdigest().upper()
    r = httpx.get(f"https://api.pwnedpasswords.com/range/{sha1[:5]}")
    if sha1[5:] in r.text:   issues.append("Password found in breach database!")
    return {"ok": not issues, "issues": issues}