{"uid":"cap_5LhHn-d1J4IMZX-79dvDu","slug":"serp-extract-agentdiet-dev-github-repository-security-license-auditor-d5499407","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/github-scanner)","url":"https://serp-extract.agentdiet.dev/v1/github-scanner?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_O3BQCMbRCKEpTgivWYTc2","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before integrating or executing code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit it for license risks, supply-chain security issues, and check how actively it's being maintained?","exampleUseCases":[{"title":"Pre-integration repo safety check","prompt":"I'm about to pull in modelcontextprotocol/servers as a dependency — can you audit that GitHub repo for any license risks, supply-chain red flags, and tell me how actively it's maintained?"},{"title":"Open source library due diligence","prompt":"We're evaluating huggingface/transformers for our production stack. Can you scan that GitHub repo and give me a breakdown of its license, maintenance velocity, stars, and any supply-chain security concerns?"},{"title":"Coding agent dependency vetting","prompt":"Before my coding agent executes any code from the vercel/next.js repo, audit it for license compatibility, dependency risks, and overall project health so I know it's safe to proceed."}],"resultDescription":"Returns a structured report covering: detected license type and associated risk level, maintenance velocity (commit frequency, recent activity), repository popularity signals (stars, forks), and supply-chain security indicators such as dependency vulnerabilities or suspicious patterns — all designed to inform a go/no-go decision before integrating or executing code from the repository.","failureModes":["Repository not found or private (invalid owner/name format returns error)","GitHub API rate limiting causing incomplete data","Repository with no license file returns unknown license risk","Very new or empty repositories may have insufficient data for meaningful analysis","Network timeout on large repos with many dependencies"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before importing, executing, or depending on its code — particularly for license compliance, supply-chain risk, and maintenance health signals. Prefer this over generic CVE scanners when you need holistic repo-level intelligence (not just package vulnerabilities) and over manual GitHub browsing when you need structured, machine-readable output for automated decision-making.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:34:12.938Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-github-repository-security-license-auditor-cdcff27b"}