{"uid":"cap_5-W5E3B1Ezvo_87qpTm3b","slug":"token-intel-agentdiet-dev-github-repository-security-license-risk-4c1646c3","name":"GitHub Repository Security & License Risk Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://token-intel.agentdiet.dev/v1/repo-risk-score)","url":"https://token-intel.agentdiet.dev/v1/repo-risk-score?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_27rCbCCp6hcrRCFqyLDSx","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"token-intel.agentdiet.dev","brandSlug":"token-intel-agentdiet-dev-mpp","brandBaseUrl":"https://token-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain/dependency security before integrating or executing its code","exampleAgentPrompt":"Before I add langchain-ai/langgraph to my project, can you audit that GitHub repo for license risks, how actively it's maintained, and any supply-chain security concerns?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm about to use modelcontextprotocol/servers as a dependency — can you check its license risk, how well it's maintained, and whether there are any supply-chain security issues I should know about?"},{"title":"Open source license compliance check","prompt":"Our legal team needs to know if the license on huggingface/transformers is safe for commercial use — can you pull a risk score and flag any license concerns?"},{"title":"Abandoned project risk assessment","prompt":"I found a GitHub library called psf/requests that I want to rely on — can you tell me if it's still actively maintained, how many stars and forks it has, and whether it has any known dependency vulnerabilities?"}],"resultDescription":"Returns a structured risk report for the specified GitHub repository including license type and associated risk level, maintenance velocity (commit frequency, last activity), star and fork counts as popularity signals, and a supply-chain/dependency security assessment — aggregated into an overall risk score to inform whether the repo is safe to depend on or execute.","failureModes":["Invalid or non-existent repository format returns an error — repo must be in owner/name format","Private or inaccessible repositories may return incomplete data or an access error","GitHub API rate limiting may cause transient failures or degraded results","Repositories with no dependency manifest may have limited supply-chain analysis","Payment failure via x402 results in HTTP 402 and no data returned"],"whenToPreferThis":"Choose this endpoint when a coding agent or developer needs a pre-flight safety check on a GitHub repository before adding it as a dependency, executing its code, or recommending it — especially when license compliance, maintenance health, and supply-chain security all need to be evaluated together in a single call. Prefer this over manual GitHub inspection when operating at scale or automating dependency vetting workflows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:51:25.990Z","isFirstParty":false,"canonicalSlug":"token-intel-agentdiet-dev-github-repository-security-license-risk-4c1646c3"}