Is Xiaofeng Safe?
Xiaofeng is a NuGet package with a Nerq Trust Score of 50.2/100 (C-). It is below the recommended threshold of 70. Security: 90/100. Popularity: 0/100. Data sourced from nuget.org, GitHub, and NVD. Last updated: 2026-03-24. Machine-readable data (JSON).
Is Xiaofeng safe?
CAUTION — Xiaofeng has a Nerq Trust Score of 50.2/100 (C-). It has moderate trust signals but shows some areas of concern that warrant attention. Suitable for development use — review security and maintenance signals before production deployment.
Trust Score Breakdown
Key Findings
Details
| Author | Jacky |
| Category | nuget |
| Source | N/A |
Safety Guide: Xiaofeng
What is Xiaofeng?
Xiaofeng is a NuGet package — 基础类库、数据库中间件、网络通讯中间件、Redis、Socket、HttpHelper、IQueryableX、Cache、FTP、JSON、XML、IO、配置、各种加密码算法、作业调度、正则、通用数据库操作,支持10多种数据库.
How to Verify Safety
Run dotnet list package --vulnerable. Check publisher on nuget.org.
You can also check the trust score via API: GET /v1/preflight?target=XiaoFeng
Key Safety Concerns for NuGet packages
When evaluating any NuGet package, watch for: dependency vulnerabilities, publisher verification.
Trust Assessment
Xiaofeng has a Nerq Trust Score of 50/100 (C-) and has not yet reached Nerq trust threshold (70+). This score is based on automated analysis of security, maintenance, community, and quality signals.
Key Takeaways
- Xiaofeng has a Trust Score of 50/100 (C-).
- Review carefully before use — below trust threshold.
- Always verify independently using the Nerq API.
Frequently Asked Questions
Is Xiaofeng safe to use?
What is Xiaofeng's trust score?
What are safer alternatives to Xiaofeng?
Does Xiaofeng have known vulnerabilities?
Is Xiaofeng's publisher verified?
Disclaimer: Nerq trust scores are automated assessments based on publicly available signals. They are not endorsements or guarantees. Always conduct your own due diligence.