{"uid":"cap_50nkbS51DjzpJBHzClMMr","slug":"hn-pulse-agentdiet-dev-github-repository-supply-chain-license-c9880d32","name":"GitHub Repository Supply Chain & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://hn-pulse.agentdiet.dev/v1/repo-supply-chain-scan)","url":"https://hn-pulse.agentdiet.dev/v1/repo-supply-chain-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_9Q8ST9pJKVskwBBfgpLZJ","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"hn-pulse.agentdiet.dev","brandSlug":"hn-pulse-agentdiet-dev-mpp","brandBaseUrl":"https://hn-pulse.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph to our project, can you run a full supply chain and license audit on it — I need to know about any license risks, how active the maintainers are, and whether there are any dependency vulnerabilities?","exampleUseCases":[{"title":"Pre-integration security check for AI framework","prompt":"We're thinking of using modelcontextprotocol/servers in our production stack — can you audit it for license risks, supply chain vulnerabilities, and tell me how well-maintained it is before we commit?"},{"title":"Open source license compliance review","prompt":"Our legal team needs to know if huggingface/transformers has any license restrictions that would block commercial use — can you scan the repo and give me a license risk summary?"},{"title":"Evaluating community trust before adoption","prompt":"Before we fork and build on top of microsoft/autogen, can you check the repo's maintenance velocity, stars, forks, and flag any supply chain red flags?"}],"resultDescription":"Returns a structured security report for the specified GitHub repository, including license risk classification, maintenance velocity metrics, community signals (stars/forks), and supply-chain security findings such as dependency vulnerabilities or suspicious package patterns.","failureModes":["Invalid or non-existent repo format returns an error (e.g. malformed owner/name string)","Private or inaccessible repositories may return access-denied or incomplete results","GitHub API rate limiting could cause temporary failures or incomplete data","Repos with no dependency manifests may return limited supply chain data","Payment not received (HTTP 402) blocks the scan from executing"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency, forking it, or executing its code — specifically when license compliance, supply chain integrity, and maintenance health all need to be assessed in a single call. Prefer this over generic GitHub API calls when you need a consolidated security and risk report rather than raw metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:22:41.050Z","isFirstParty":false,"canonicalSlug":"hn-pulse-agentdiet-dev-github-repository-supply-chain-license-c9880d32"}