I'm a web developer and I deal with a lot of passwords. Many of these I only need for a short while and then never again. My login keychain has quickly grown to several hundred items. I do the occasional spring clean, but it's tedious.
What would be incredibly useful is if I could see the last time each password was read. Anything that hadn't been touched in say three months would be a good candidate for deletion. I might even be able to automate the process, moving old passwords into a "trash" keychain.
I've played around with the
security terminal command and it looks like only creation and modification times are recorded. Is that right?