# CF Package Check – Abandonment Risk Scorer

> CF Package Check – Abandonment Risk Scorer is a paid API for AI agents from packages.cfsoft.us, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-15).

Returns an abandonment risk score (0–100), status, months since last update, and underlying signals for a WordPress plugin, npm package, or PyPI project.

## Facts

- Endpoint: GET https://packages.cfsoft.us/v1/check
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cf-package-check-abandonment-risk-scorer-ac012038
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0un-o68AAVq4CDGhzs4O6

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cf-package-check-abandonment-risk-scorer-ac012038
```

Example prompt: Can you check whether the npm package 'lodash' is abandoned — I want to know its abandonment risk score and how long it's been since the last update?

## When to prefer this

Use this endpoint when you need a quick, scored risk assessment of whether a specific open-source package (WordPress plugin, npm, or PyPI) is still actively maintained. It is ideal for dependency audits, plugin vetting pipelines, or any workflow where an agent needs to flag stale or risky software dependencies before adoption. Prefer this over manual registry checks when you need a normalized 0–100 score and signal breakdown rather than raw registry metadata.

## Known failure modes

- Package name not found in the specified ecosystem — returns error or empty result
- Invalid ecosystem value (not wordpress, npm, or pypi) — returns validation error
- Package exists but registry data is unavailable or rate-limited — partial or error response
- Misspelled package name returns no data rather than a close match
- Private or unlisted packages cannot be evaluated

## How this service works

Is this WordPress plugin, npm package or PyPI project abandoned? Status, 0-100 abandonment-risk score, months since last update, and the signals behind it.

## Output

Returns a structured report including: a 0–100 abandonment risk score, an overall status label (e.g. active, at-risk, abandoned), the number of months since the last update, and the specific signals (e.g. no recent commits, no new versions, owner inactivity) that drove the score.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "ecosystem",
      "name"
     ],
     "properties": {
      "name": {
       "type": "string",
       "description": "Package name, PyPI project, or WordPress.org plugin slug"
      },
      "ecosystem": {
       "enum": [
        "wordpress",
        "npm",
        "pypi"
       ],
       "type": "string"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cf-package-check-abandonment-risk-scorer-ac012038/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from packages.cfsoft.us](https://www.zero.xyz/host/packages.cfsoft.us/llms.txt)
