{"uid":"cap_7vtSPRHlwwvIt0J6ukbJa","slug":"onchain-risk-agentdiet-dev-github-repository-dependency-license-13816ea3","name":"GitHub Repository Dependency & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://onchain-risk.agentdiet.dev/v1/dependency-audit)","url":"https://onchain-risk.agentdiet.dev/v1/dependency-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_PWQOk80XaF2D7xLrXIfHv","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"onchain-risk.agentdiet.dev","brandSlug":"onchain-risk-agentdiet-dev-mpp","brandBaseUrl":"https://onchain-risk.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance health, popularity signals, and supply-chain security vulnerabilities before code execution or adoption.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency in our project, can you audit that GitHub repo for license risks, supply-chain security issues, and check how actively it's being maintained?","exampleUseCases":[{"title":"Pre-adoption open source due diligence","prompt":"I'm about to pull in modelcontextprotocol/servers as a dependency — can you run a full audit on that GitHub repo to flag any license conflicts, supply-chain risks, or maintenance red flags before we commit to it?"},{"title":"CI gate for new dependency PRs","prompt":"Someone just opened a PR adding huggingface/transformers as a dependency. Can you audit that GitHub repo for license compatibility, vulnerability exposure in its dependency tree, and tell me how healthy the project looks based on maintenance velocity and community traction?"},{"title":"Security review before agent code execution","prompt":"Before my coding agent actually runs code from the openai/openai-python repo, can you check it for supply-chain security issues, risky licenses, and whether it's actively maintained?"}],"resultDescription":"Returns a structured report covering: license type and risk classification, maintenance velocity metrics (commit frequency, last activity, open issues), popularity signals (stars and forks), and supply-chain security findings including vulnerable or suspicious dependencies.","failureModes":["Invalid or non-existent repository format returns an error (repo must be owner/name format)","Private or inaccessible repositories may return insufficient data or an access error","GitHub API rate limiting may affect result completeness","Newly created repositories with minimal history may return sparse signals","Network timeouts if GitHub is slow to respond"],"whenToPreferThis":"Choose this endpoint when an AI coding agent, developer, or automated CI/CD pipeline needs to evaluate a GitHub repository before adopting it as a dependency, executing its code, or approving a pull request that introduces it. It is particularly valuable for supply-chain security enforcement, open source license compliance checks, and maintenance health due diligence — all in a single call at $0.01 per audit.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:37:41.347Z","isFirstParty":false,"canonicalSlug":"onchain-risk-agentdiet-dev-github-repository-dependency-license-2c6bc15c"}