cf-package-check

Is this package abandoned?

package_check

Read-only

Check whether a WordPress.org plugin, npm package or PyPI project is abandoned. Costs $0.02 per call via x402. Returns status (active, stale, abandoned, deprecated or closed), a 0-100 abandonment-risk score, months since the last update, the latest release, and the signals behind the score. Signals, not a verdict: check the project before deciding.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "ecosystem": "<ecosystem>",
      "name": "<name>"
    },
    "name": "package_check"
  }
}

Input Schema

Name	Required	Description	Default
`name`	Yes	npm package ("express", "@scope/pkg"), PyPI project ("requests"), or WordPress.org plugin slug ("contact-form-7").
`ecosystem`	Yes

Schema Changelog

Changes observed during successful MCP inspections.

First observedSep 12, 2026

TDQS

A3.9/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With readOnlyHint=true already declaring the safety profile, the description adds genuinely new behavioral context: a per-call cost of $0.02 via x402, and an enumeration of the returned fields (status values, risk score, months since update, latest release, signals). This is far more than the annotation conveys, though it doesn't discuss rate limits or failure modes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with the core purpose and followed by cost, then return shape, then interpretive caveat. Every sentence carries information, though the return-field enumeration is slightly list-like.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Since there is no output schema, spelling out the status vocabulary, risk score range, and signal fields is exactly what the description should do. The only gap is the absence of any routing cue relative to the sibling package_sources.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is only 50%: the 'name' property is documented with concrete examples, but the 'ecosystem' enum has no description. The description partially compensates by naming the three ecosystems (WordPress.org, npm, PyPI), which maps to the enum values, but it adds no format guidance beyond what the name description already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Check') and resource ('whether a WordPress.org plugin, npm package or PyPI project is abandoned'), naming all three ecosystems the tool covers. An agent can immediately tell this apart from package_sources, which implies source retrieval rather than abandonment assessment.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The closing line, 'Signals, not a verdict: check the project before deciding,' gives useful interpretation guidance. However, it offers no explicit when-to-use vs. the sibling package_sources, nor any statement of when this tool is unnecessary, so usage is only implied.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All cf-package-check tools Inspect

Try in Browser

Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources

Need Help?