{"uid":"cap_2PtKv7Tf5QTpn6ukpiH8U","slug":"shopify-spy-agentdiet-dev-github-repository-security-license-auditor-d1800ceb","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://shopify-spy.agentdiet.dev/v1/github-secops-auditor)","url":"https://shopify-spy.agentdiet.dev/v1/github-secops-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_825LEjwJOC_g-iizSkIxY","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"shopify-spy.agentdiet.dev","brandSlug":"shopify-spy-agentdiet-dev-mpp","brandBaseUrl":"https://shopify-spy.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, dependency vulnerabilities, maintenance health, and supply-chain security signals before integrating or executing its code.","exampleAgentPrompt":"Can you audit the langchain-ai/langgraph GitHub repo for me — check its license risk, how actively it's maintained, and whether there are any supply-chain security concerns before I add it as a dependency?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"Before I add huggingface/transformers to my production codebase, can you check its license type, how actively it's maintained, and whether there are any supply-chain red flags?"},{"title":"Open source license compliance check","prompt":"I need to know if the license on facebook/react is compatible with a commercial product — can you audit the repo and tell me the license risk level?"},{"title":"Evaluating an unfamiliar GitHub project","prompt":"I found a cool library at run-llama/llama_index — can you assess its GitHub health: stars, forks, maintenance velocity, and any security concerns I should know about before using it?"}],"resultDescription":"Returns a structured report covering the repository's detected license and associated risk classification, maintenance velocity metrics (commit frequency, last activity), community signals (stars, forks, contributor count), and supply-chain security flags such as dependency hygiene and known risk patterns.","failureModes":["Invalid or non-existent repository format returns an error (e.g. typo in owner/name)","Private or inaccessible repositories may return limited or no data","GitHub API rate limiting may cause partial results or timeouts","Repositories with no detectable license return ambiguous license risk","Payment failure via x402 results in HTTP 402 response before any data is returned"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adopting it as a dependency, executing its code, or integrating it into a supply chain. It is particularly valuable when license compliance, maintenance freshness, or security posture is a concern — especially compared to generic code search tools that do not provide security or license risk scoring.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:37.618Z","isFirstParty":false,"canonicalSlug":"shopify-spy-agentdiet-dev-github-repository-security-license-auditor-6b511ce2"}