{"uid":"cap_6UeCFYCDngkd1VgmU1wQg","slug":"arxiv-digest-agentdiet-dev-github-repository-supply-chain-security-71890d4a","name":"GitHub Repository Supply Chain Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://arxiv-digest.agentdiet.dev/v1/repo-supply-chain-scan)","url":"https://arxiv-digest.agentdiet.dev/v1/repo-supply-chain-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_SHs84wTATrSc7QUFbIgyQ","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"arxiv-digest.agentdiet.dev","brandSlug":"arxiv-digest-agentdiet-dev-mpp","brandBaseUrl":"https://arxiv-digest.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security issues before using or executing its code.","exampleAgentPrompt":"Before I integrate langchain-ai/langgraph into our production codebase, can you audit it for license risks, supply-chain security issues, and check how actively it's being maintained?","exampleUseCases":[{"title":"Pre-integration dependency security check","prompt":"I'm about to add modelcontextprotocol/servers as a dependency — can you scan it for license issues, supply-chain vulnerabilities, and tell me how healthy the maintenance looks?"},{"title":"Open-source library due diligence","prompt":"We're evaluating huggingface/transformers for our ML pipeline. Can you check its license risk, community trust signals like stars and forks, and whether there are any supply-chain red flags I should know about?"},{"title":"AI agent vetting a repo before code execution","prompt":"Before running any code from the repo openai/openai-python, audit it for license compliance risks, check its maintenance velocity, and flag any supply-chain security concerns."}],"resultDescription":"Returns a structured report on the repository including license type and risk level, maintenance velocity (commit frequency, last activity), community trust signals (stars, forks), and supply-chain security findings such as flagged dependencies or known vulnerabilities.","failureModes":["Invalid or non-existent repo format returns an error (e.g. missing owner/name structure)","Private or inaccessible repositories cannot be scanned and return an access error","GitHub API rate limiting may cause incomplete results or timeouts","Repositories with no dependency manifest files may return limited supply-chain data","Payment failure via x402 results in a 402 response with no scan data"],"whenToPreferThis":"Choose this endpoint when you need a holistic pre-integration security assessment of a GitHub repository — combining license compliance, supply-chain risk, and maintenance health in a single call. Prefer it over generic CVE scanners (which focus only on known vulnerabilities) or GitHub's native UI (which doesn't surface license risk scores or maintenance velocity in a structured, agent-consumable format).","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:29.941Z","isFirstParty":false,"canonicalSlug":"arxiv-digest-agentdiet-dev-github-repository-supply-chain-security-71890d4a"}