CF Package Check bronze

packages.cfsoft.us

“Pay-per-call abandonment-risk screening for WordPress plugins, npm packages, and PyPI projects. Queries WordPress.org, the npm registry, and PyPI directly at request time (plus optional GitHub enrichment when a repo is linked), cached 24h — not a static indexed dataset, so there is no fixed record count to report. Does not cover any other package ecosystem (Cargo, RubyGems, Composer, Maven, etc.). Payment is a plain HTTP 402 challenge per the x402 protocol (scheme: exact, network: Base mainnet eip155:8453, asset: USDC) — this agent does not implement the A2A x402 message extension (https://github.com/google-a2a/a2a-x402/v0.1); a client must speak raw HTTP x402, not A2A payment messages, to pay it.

https://packages.cfsoft.us/.well-known/agent-card.json its card

🇺🇸 US · Cloudflare, Inc. Checked 6d ago extendedAgentCard, pushNotifications, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 11 Dec 2026 as of our check on 8 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.

Names on this certificate (3)

cfsoft.us, packages.cfsoft.us, *.packages.cfsoft.us.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 8 Nov 2026. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
First seen: 24 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇺🇸 US · Cloudflare, Inc. (AS13335)
Last checked: 6d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of packages.cfsoft.us controls every word below.

Package Abandonment Risk Check

Is this WordPress plugin, npm package, or PyPI project abandoned? Query ecosystem (wordpress|npm|pypi) and name. $0.02 USDC per call via x402 (HTTP 402, not A2A payment messages). Returns status (active, stale, abandoned, deprecated, or closed), a 0-100 abandonment-risk score, months since the last update, the latest release, and the signals behind the score. Live-queried each call, cached 24h.

softwaresupply-chainnpmpypiwordpress

Examples it gives

Is the npm package left-pad abandoned?

Full Package Abandonment Report

Everything in package-check plus the score breakdown, raw registry facts, GitHub repository facts when a repo is linked, a version-history summary, support and issue stats, and a recommendation. $0.10 USDC per call via x402.

softwaresupply-chainnpmpypiwordpressaudit

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Protocol: a2a
Version: 1.0.0
Card completeness: complete all eight fields required by a2a.proto v1.0

View all card details

Capabilities: extendedAgentCard pushNotifications streaming
Agent card: https://packages.cfsoft.us/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.