{"uid":"cap_0NIc1jR85NjFAnL0nucI9","slug":"workflows-agentdiet-dev-github-repository-license-dependency-supply-60067f8f","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://workflows.agentdiet.dev/v1/repo-audit)","url":"https://workflows.agentdiet.dev/v1/repo-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_QVbiS7y3Azk2Mihxb_10D","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"workflows.agentdiet.dev","brandSlug":"workflows-agentdiet-dev-mpp","brandBaseUrl":"https://workflows.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks activity, and supply-chain security threats before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you run a full audit on it — license risk, how actively it's maintained, stars and forks, and any supply-chain security concerns?","exampleUseCases":[{"title":"Pre-integration repo safety check","prompt":"I'm about to pull in modelcontextprotocol/servers into our codebase — can you audit it for license issues, maintenance health, and any supply-chain security red flags first?"},{"title":"Open-source library due diligence","prompt":"We're evaluating openai/swarm as a dependency for our production system. Can you check its license risk, how active the maintainers are, and whether there are any known security concerns in the repo?"},{"title":"Coding agent pre-execution vetting","prompt":"Before I let my agent clone and run code from huggingface/transformers, audit that repo for license compliance, maintenance velocity, and supply-chain risks so I know it's safe to execute."}],"resultDescription":"Returns a structured report covering the repository's license type and associated risk level, maintenance velocity indicators (commit frequency, last commit date), community signals (stars, forks), and supply-chain security findings such as suspicious dependencies or known vulnerability flags.","failureModes":["Invalid or non-existent repository slug returns an error","Private repositories that the service cannot access will fail to audit","Rate limiting or GitHub API downtime may cause partial or failed responses","Repositories with no license file may return incomplete license risk data","Payment failure (HTTP 402) if x402 micropayment is not satisfied"],"whenToPreferThis":"Choose this endpoint when you need a holistic pre-integration health check on a GitHub repository — combining license compliance, maintenance activity, community signals, and supply-chain security in a single call. Prefer it over raw GitHub API calls when you want pre-computed risk assessments rather than raw metadata, and over generic CVE scanners when you also need license and maintenance signals alongside vulnerability data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:25.347Z","isFirstParty":false,"canonicalSlug":"workflows-agentdiet-dev-github-repository-license-dependency-supply-e4552062"}