{"uid":"cap_13YGGS6Lhe74k7nUOH9N6","slug":"json-repair-agentdiet-dev-github-repo-dependency-license-security-29150e4b","name":"GitHub Repo Dependency & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://json-repair.agentdiet.dev/v1/dependency-audit)","url":"https://json-repair.agentdiet.dev/v1/dependency-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm__ekjJ0gxKBSZ3jq-mOIDo","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"json-repair.agentdiet.dev","brandSlug":"json-repair-agentdiet-dev-mpp","brandBaseUrl":"https://json-repair.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security signals before code integration.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit it for license risk, maintenance health, and supply-chain security issues?","exampleUseCases":[{"title":"Pre-integration dependency risk check","prompt":"I'm about to use modelcontextprotocol/servers in my production app — can you check its license compatibility, how actively it's maintained, and whether there are any supply-chain security concerns?"},{"title":"Open source project health evaluation","prompt":"Can you pull up the maintenance velocity, star/fork counts, and any dependency vulnerabilities for huggingface/transformers so I can decide if it's a trustworthy dependency?"},{"title":"License compliance audit before shipping","prompt":"We're building a commercial product and want to use facebook/react-native — please audit it for license risk to make sure we won't have legal issues shipping with it."}],"resultDescription":"Returns a structured JSON object containing license risk classification, maintenance velocity indicators (e.g. commit frequency, last push date), repository popularity signals (stars, forks), and supply-chain security findings such as dependency vulnerability flags and proxy/malicious package indicators.","failureModes":["Invalid or non-existent repo format returns an error (repo must be in owner/name format)","Private repositories that cannot be accessed by the auditor return an access error","GitHub API rate limits may cause transient failures or incomplete data","Repos with no dependency manifest files may return partial results with missing supply-chain data","Payment not completed (HTTP 402) if x402 payment header is missing or insufficient"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-integration security gate on a GitHub repository — specifically when license compliance, dependency vulnerability scanning, and maintenance health are all needed in a single call. Prefer this over raw GitHub API calls when you need a synthesized risk summary rather than raw metadata, and when supply-chain security signals (honeypot flags, malicious package detection) are required alongside standard repo metrics.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:14.999Z","isFirstParty":false,"canonicalSlug":"json-repair-agentdiet-dev-github-repo-dependency-license-security-c178c561"}