{"uid":"cap_5MYFmDrldw4S4B78DG9FH","slug":"cve-intel-agentdiet-dev-github-repository-security-license-auditor-64de4ad0","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://cve-intel.agentdiet.dev/v1/repo-audit)","url":"https://cve-intel.agentdiet.dev/v1/repo-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_-2PDF1o1w9mCRAMRmKs-n","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"cve-intel.agentdiet.dev","brandSlug":"cve-intel-agentdiet-dev-mpp","brandBaseUrl":"https://cve-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance velocity, dependency vulnerabilities, and supply-chain security signals before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit it for license risks, supply-chain vulnerabilities, and check how actively maintained it is?","exampleUseCases":[{"title":"Pre-integration open source safety check","prompt":"I'm about to use modelcontextprotocol/servers in my production app — can you audit that GitHub repo for any license conflicts, unmaintained signals, or known supply-chain security issues?"},{"title":"Dependency vetting for a coding agent","prompt":"Before my coding agent installs any packages from huggingface/transformers, audit that repo and tell me if there are license risks or dependency vulnerabilities I should worry about."},{"title":"Open source due diligence for procurement","prompt":"Can you pull a security and license audit on the GitHub repo vercel/next.js? I need to know its maintenance velocity, star count, and whether there are any supply-chain red flags before we approve it for internal use."}],"resultDescription":"Returns a structured report on the target GitHub repository including license type and risk level, maintenance velocity indicators (commit frequency, last activity), stars and forks counts, dependency vulnerability findings, and supply-chain security signals that help determine whether the repo is safe to integrate or execute.","failureModes":["Invalid or non-existent repository name returns an error or empty result","Private repositories that are not publicly accessible cannot be audited","Rate limits or GitHub API unavailability may cause timeouts","Repos with no dependency manifest may have incomplete supply-chain analysis","Malformed owner/name format results in a validation error"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before installing dependencies, executing code, or integrating an open source package — especially when license compliance, maintenance health, and supply-chain security are all required in a single call. Prefer this over manual GitHub inspection or generic CVE databases when you need a consolidated, machine-readable audit covering multiple risk dimensions at once.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:39.023Z","isFirstParty":false,"canonicalSlug":"cve-intel-agentdiet-dev-github-repository-security-license-auditor-71c7ce73"}