{"uid":"cap_2j_LKRuGd__Q3JpiYZN56","slug":"shopify-intel-agentdiet-dev-github-repository-dependency-license-0bdb92c9","name":"GitHub Repository Dependency & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://shopify-intel.agentdiet.dev/v1/sbom-auditor)","url":"https://shopify-intel.agentdiet.dev/v1/sbom-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_76bDA-iGJnLc2QFjSkUU3","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"shopify-intel.agentdiet.dev","brandSlug":"shopify-intel-agentdiet-dev-mpp","brandBaseUrl":"https://shopify-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, dependency supply-chain security, maintenance velocity, and community health metrics before using or executing its code.","exampleAgentPrompt":"Can you audit the langchain-ai/langgraph GitHub repo for license risk, supply-chain security issues, and maintenance health before I start using it in my project?","exampleUseCases":[{"title":"Pre-adoption OSS dependency vetting","prompt":"Before I add huggingface/transformers to our codebase, can you check its license risk, dependency security, and whether it's actively maintained?"},{"title":"Security review before code execution","prompt":"I'm about to run some code from the repo openai/openai-python — can you audit it for supply-chain security risks and flag any problematic dependencies first?"},{"title":"License compliance check for legal team","prompt":"Our legal team needs to know the license risk profile for the apache/airflow GitHub repo — can you pull that analysis including any copyleft or commercial-use concerns?"}],"resultDescription":"Returns a structured report covering the repository's detected license type and associated risk level, dependency supply-chain security findings (e.g. known vulnerabilities, suspicious packages), maintenance velocity indicators (commit frequency, last activity), and community health signals such as stars and forks counts.","failureModes":["Invalid or non-existent repository name returns an error (repo not found)","Private repositories may not be accessible and return an authorization error","Rate limiting or GitHub API unavailability may cause transient failures","Malformed repo parameter (not in owner/name format) returns a validation error","Repositories with no dependencies may return incomplete supply-chain data"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adopting it as a dependency, running its code, or including it in a software supply chain. It is especially useful for license compliance workflows, security-conscious dependency selection, or automated open source governance pipelines. Prefer it over generic GitHub API calls when you need a combined risk signal (license + security + maintenance + community) in a single response.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:18.096Z","isFirstParty":false,"canonicalSlug":"shopify-intel-agentdiet-dev-github-repository-dependency-license-c088fed6"}