{"uid":"cap_3_uo0LQc9-cnKLvRPCl75","slug":"serp-extract-agentdiet-dev-github-repository-supply-chain-security-7c8f6ab3","name":"GitHub Repository Supply-Chain Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/repo-supply-chain-scan)","url":"https://serp-extract.agentdiet.dev/v1/repo-supply-chain-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"},"limit":{"type":"integer","default":20,"maximum":100,"minimum":1,"description":"Maximum number of items to return per page (1-100)"},"cursor":{"type":"string","description":"Opaque pagination cursor for fetching the next page"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_577ye8eUSrGnLFWyrRrNF","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, dependency vulnerabilities, and supply-chain security signals before code adoption or execution.","exampleAgentPrompt":"Can you audit the GitHub repo langchain-ai/langgraph for license risk, supply-chain vulnerabilities, and check how actively maintained it is before I add it as a dependency?","exampleUseCases":[{"title":"Pre-adoption dependency due diligence","prompt":"Before I add huggingface/transformers to my project, can you check its GitHub repo for license risks, maintenance health, and any supply-chain security red flags?"},{"title":"Coding agent safe-execution pre-check","prompt":"I want to run some code from the repo openai/openai-python — can you first audit it for dependency vulnerabilities and confirm the license is permissive enough for commercial use?"},{"title":"Open source project trust evaluation","prompt":"We're evaluating tiangolo/fastapi as a framework for our team — can you pull its GitHub stats like stars and forks, check how recently it's been maintained, and flag any supply-chain or license concerns?"}],"resultDescription":"Returns a structured report covering the repository's detected license type and risk level, maintenance velocity indicators (recent commit activity, last push date), community metrics (stars, forks), and supply-chain security findings such as dependency vulnerability flags or suspicious package signals.","failureModes":["Invalid or non-existent repo slug returns an error or empty result","Private repositories are inaccessible and will return an access error","Rate limiting from GitHub API may cause transient failures","Repositories with no dependency manifest files may return incomplete vulnerability data","Malformed owner/name format (e.g. missing slash) triggers a validation error"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-flight security and compliance check on a GitHub repository before integrating it as a dependency, running its code, or recommending it to users. It is especially valuable for supply-chain-aware workflows, license compliance screening, and evaluating maintenance health of open source projects — all in a single call rather than manually querying GitHub, OSV.dev, and license databases separately.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:49.790Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-github-repository-supply-chain-security-7c8f6ab3"}