{"uid":"cap_A6t6CbGhSXaFU05C-7Yxy","slug":"email-verify-agentdiet-dev-github-repository-license-dependency-c76587fd","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://email-verify.agentdiet.dev/v1/ci-cd-workflow-audit)","url":"https://email-verify.agentdiet.dev/v1/ci-cd-workflow-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_xdHQVHKQEVaSz79BnjLM9","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"email-verify.agentdiet.dev","brandSlug":"email-verify-agentdiet-dev-mpp","brandBaseUrl":"https://email-verify.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security to inform safe code adoption decisions.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit its GitHub repo for license compatibility, supply-chain security risks, and whether it's still actively maintained?","exampleUseCases":[{"title":"Pre-integration open source license check","prompt":"I want to use the huggingface/transformers library in my commercial product — can you audit its GitHub repo and tell me if the license is safe for commercial use and whether there are any supply-chain security concerns?"},{"title":"Dependency security review before deployment","prompt":"We're about to ship a release that depends on modelcontextprotocol/servers — please audit that GitHub repo for any security vulnerabilities, outdated dependencies, or maintenance red flags I should know about first."},{"title":"Open source health check for due diligence","prompt":"We're evaluating openai/openai-python as a core dependency for our startup — can you pull the stars, forks, maintenance velocity, and license risk so I can put together a due diligence report?"}],"resultDescription":"Returns a structured report covering the repository's license type and associated legal risk, maintenance velocity indicators (commit frequency, last activity), community health signals (stars, forks), and supply-chain security findings such as dependency vulnerabilities or CI/CD workflow risks.","failureModes":["Invalid or non-existent repository specified (owner/name format error or repo not found on GitHub)","GitHub API rate limiting causing incomplete data retrieval","Private repositories inaccessible without authentication","Repository has no license file, making license risk assessment inconclusive","Network timeout when fetching dependency manifests for large repositories"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-integration security and compliance check on a specific GitHub repository — especially before adding a new open source dependency, publishing code that bundles third-party libraries, or conducting due diligence on an acquisition or vendor. It is particularly useful when both license compatibility and supply-chain security must be evaluated together in a single call rather than querying multiple separate tools.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:15.002Z","isFirstParty":false,"canonicalSlug":"email-verify-agentdiet-dev-github-repository-license-dependency-87d1ab5f"}