{"uid":"cap_39y8aP9BvJXxvDeHHoROe","slug":"token-intel-agentdiet-dev-github-repository-security-license-risk-3fe69abd","name":"GitHub Repository Security & License Risk Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://token-intel.agentdiet.dev/v1/repo-risk-score)","url":"https://token-intel.agentdiet.dev/v1/repo-risk-score?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_C0G2LGmOisOuCE4qJzWy-","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"token-intel.agentdiet.dev","brandSlug":"token-intel-agentdiet-dev-mpp","brandBaseUrl":"https://token-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, popularity signals, and supply-chain security before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency in my project, can you audit it for license risks, supply-chain security issues, and check if it's actively maintained?","exampleUseCases":[{"title":"Pre-integration open source vetting","prompt":"I'm thinking of using openai/openai-python in my commercial SaaS — can you check its license risk, maintenance velocity, and any supply-chain security concerns before I integrate it?"},{"title":"Dependency security audit before deployment","prompt":"We're about to deploy code that uses huggingface/transformers — can you run a full security and license audit on that repo so I know if there are any red flags?"},{"title":"Evaluating a lesser-known community repo","prompt":"Someone recommended I use microsoft/promptflow for my AI pipeline — can you check how popular it is, whether it's actively maintained, and whether the license is safe for enterprise use?"}],"resultDescription":"Returns a structured risk assessment of the specified GitHub repository including license risk level, maintenance velocity indicators, stars/forks counts, supply-chain security findings, and an overall risk score to help the agent decide whether it is safe to use or depend on the repository.","failureModes":["Invalid or non-existent repository format returns an error — repo must be in owner/name format","Private repositories that are inaccessible to the auditor will fail with an access error","GitHub API rate limiting may cause intermittent failures or incomplete data","Repository with no license file may return indeterminate license risk","Payment not completed (HTTP 402) results in no data returned"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adding it as a dependency, executing its code, or integrating it into a commercial project. It is especially valuable for compliance-sensitive environments where license type matters, or when evaluating lesser-known repos for supply-chain risk. Prefer this over manual GitHub browsing when automated, scored risk assessments are needed at scale or as part of an agent workflow.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:27.053Z","isFirstParty":false,"canonicalSlug":"token-intel-agentdiet-dev-github-repository-security-license-risk-4c1646c3"}