The count is counting all hits, not the matched password found

[DragonBe]

• I was not able to find an open or closed issue matching what I'm seeing.
• This is not a question.

When running count($hibp) it returns a total of all returned hash counts, not the matched count.

Code to reproduce the issue

<?php

require_once __DIR__ . '/vendor/autoload.php';

$hibp = \Dragonbe\Hibp\HibpFactory::create();
$found = $hibp->isPwnedPassword('password');
$count = count($hibp);
echo 'Password "password": ' . (
    $found
    ? 'Pwned (found ' . $count . ' times)'
    : 'Not used in a breach yet'
    ) . PHP_EOL;

Gives:

Password "password": Pwned (found 3311463 times)

Expected results

Going to HIBP it returns for password "password":

This password has been seen 3,303,003 times before

Actual results

There's an issue on lines 96 - 98 in src/Hibp.php:

   list($hash, $count) = explode(':', $value);
   $totalCount += $count;
   return (0 === strcmp($hash, substr($password, 5)));

It should be changed into:

   list($hash, $count) = explode(':', $value);
   if (0 === strcmp($hash, substr($password, 5))) {
       $totalCount = $count;
       return true;
   }
   return false;

[DragonBe]

Solved in commit e871df6 and released as v0.0.3