I read your 8 day old bug report and as you state there this behavior is well documented.

Please note that it follows the way many password policies are phrased, taking lowercase as default.

What you want is a fundamental change of concept, so would only be fair to provide the necessary code to the author.

First step could be to follow Choroba's recommendation to simply adjust the number of min capital letters with the help of a random generator.

Next step could be to patch this behavior into the code.

And if the author doesn't reply, fork.the module and ask CPAN to take over maintenance.