{"uid":"cap_AFYDGv-VHyfYzTSAwaH2V","slug":"sec-intel-agentdiet-dev-github-repository-security-license-risk-auditor-4d0e288d","name":"GitHub Repository Security & License Risk Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://sec-intel.agentdiet.dev/v1/repo-risk-score)","url":"https://sec-intel.agentdiet.dev/v1/repo-risk-score?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_XF_vDTcv7N_acCIU66-SX","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"sec-intel.agentdiet.dev","brandSlug":"sec-intel-agentdiet-dev-mpp","brandBaseUrl":"https://sec-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, popularity metrics, and supply-chain security before code execution or dependency adoption.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency in my project, can you audit its GitHub repo for license risk, supply-chain security issues, and check whether it's still actively maintained?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm about to use modelcontextprotocol/servers in my production app — can you check if it has any license issues, how actively it's maintained, and whether there are any supply-chain security concerns I should know about?"},{"title":"Open source license compliance check","prompt":"My company has strict licensing rules — can you audit the huggingface/transformers GitHub repo and tell me what license risk it carries before I use it in a commercial product?"},{"title":"Abandoned repo security scan","prompt":"I found a library at joealcorn/python-client that looks useful but I'm not sure if it's still maintained — can you evaluate its GitHub activity, star count, and flag any dependency or supply-chain risks?"}],"resultDescription":"Returns a structured risk assessment for the given GitHub repository, including license risk classification, maintenance velocity indicators (commit frequency, last update), popularity signals (stars, forks), and supply-chain security findings such as dependency vulnerabilities or suspicious package patterns.","failureModes":["Invalid or non-existent repository (owner/name format error or repo not found on GitHub)","Rate limiting from GitHub API causing incomplete data retrieval","Private repositories inaccessible without authentication tokens","Missing or ambiguous license file leading to undetermined license risk","Repositories with no dependencies yield limited supply-chain analysis"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adopting it as a dependency, running its code, or recommending it to others — especially when license compliance, active maintenance, and supply-chain integrity are all required in a single call. Prefer this over generic GitHub API queries when you want a pre-computed risk score rather than raw metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:09.957Z","isFirstParty":false,"canonicalSlug":"sec-intel-agentdiet-dev-github-repository-security-license-risk-auditor-4d0e288d"}