Yes! We use them to check for weak passwords server-side. (Passwords arrive already hashed, we have a large dataset of known bad passwords that we load when the application starts.)

https://github.com/lavab/api/search?utf8=%E2%9C%93&q=bf