> Also add an indicator or separate rating for requirements that make the passwords too easy to guess

This, naively[0], is all requirements except minimum length. Every requirement reduces the problem space for would-be attackers and increases the cognitive burden for users.

[0] I recognise that with many modern techniques, password-cracking utilises common patterns rather than a brute-force approach.