Cracklib got disabled in base profiles https://github.com/gentoo/gentoo/commit/b2701d56d58a5dd638150ad99cfc0d1139ed34d4
Seems like app-admin/pwgen is a good alternative. Bye bye, apg.
apg is back on track with apg-2.3.0b_p20150129 in tree. I see no need to force cracklib enabled by default: whoever wants it, may enable by the USE flag; new upstream doesn't support it at all, I'll send them patches later. Though in Gentoo apg[cracklib] is supported and seems to work.