{"uid":"cap_3EsXRyS3bTVZyzYnxmykc","slug":"x402-audit-agentdiet-dev-github-repository-license-dependency-supply-a9c85899","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://x402-audit.agentdiet.dev/v1/ci-cd-workflow-audit)","url":"https://x402-audit.agentdiet.dev/v1/ci-cd-workflow-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_PrOexqBN4RmEFPOFYoHgl","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"x402-audit.agentdiet.dev","brandSlug":"x402-audit-agentdiet-dev-mpp","brandBaseUrl":"https://x402-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance velocity, popularity signals, and supply-chain security vulnerabilities before code adoption or execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risks, supply-chain security issues, and check whether it's actively maintained?","exampleUseCases":[{"title":"Pre-adoption open-source library check","prompt":"I'm thinking of using huggingface/transformers in our production codebase — can you audit that GitHub repo and tell me if there are any license risks or supply-chain security concerns I should know about first?"},{"title":"CI/CD pipeline dependency vetting","prompt":"Before we merge this PR that adds modelcontextprotocol/servers as a dependency, run a security audit on that GitHub repo and flag any maintenance or license issues."},{"title":"Third-party code trust evaluation","prompt":"We're evaluating pallets/flask as a dependency for our new service — can you check the GitHub repo for supply-chain risks, how actively it's maintained, and whether the license is business-friendly?"}],"resultDescription":"Returns a structured audit report for the specified GitHub repository including: license type and risk level, maintenance velocity indicators (commit frequency, last activity), repository popularity signals (stars, forks), and supply-chain security findings such as dependency vulnerabilities and suspicious workflow patterns.","failureModes":["Invalid or non-existent repository (owner/name format required)","Private repository not accessible via public GitHub API","Rate limiting or GitHub API unavailability causing incomplete data","Repository with no detectable license returns uncertain license risk","Payment failure via x402 protocol preventing request completion"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adopting it as a dependency, executing its code, or integrating it into a CI/CD pipeline. Ideal for supply-chain security checks, license compliance due diligence, and open-source health assessment. Prefer over generic CVE scanners when you need holistic repo-level intelligence (license + maintenance + popularity + supply chain) rather than package-level vulnerability data alone.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:22:53.506Z","isFirstParty":false,"canonicalSlug":"x402-audit-agentdiet-dev-github-repository-license-dependency-supply-a9c85899"}