{"uid":"cap_DjBW4fJ2cl2vuuB3C9SSO","slug":"token-intel-agentdiet-dev-github-repository-supply-chain-license-fc7e93e8","name":"GitHub Repository Supply Chain & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://token-intel.agentdiet.dev/v1/repo-supply-chain-scan)","url":"https://token-intel.agentdiet.dev/v1/repo-supply-chain-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Rdsb78Y4Aigwb7q-DXS4s","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"token-intel.agentdiet.dev","brandSlug":"token-intel-agentdiet-dev-mpp","brandBaseUrl":"https://token-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans a GitHub repository for license risk, maintenance velocity, dependency health, and supply-chain security vulnerabilities before integrating or executing code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you do a full supply-chain and license security audit on that GitHub repo — I need to know if it's safe to use, actively maintained, and doesn't have risky dependencies?","exampleUseCases":[{"title":"Pre-integration repo safety check","prompt":"I'm about to pull in modelcontextprotocol/servers as a dependency — can you audit that GitHub repo for license risks, supply-chain issues, and whether it's actively maintained before I proceed?"},{"title":"Open source license compliance review","prompt":"Our legal team needs to know if huggingface/transformers uses any copyleft licenses that could affect our commercial product — can you scan that GitHub repo and give me a license risk assessment?"},{"title":"Evaluating a new AI library before adoption","prompt":"We're considering using microsoft/autogen in our stack — can you check the GitHub repo for security vulnerabilities in its dependencies, how healthy the community is (stars, forks, commit velocity), and any red flags in the supply chain?"}],"resultDescription":"Returns a structured report covering the repository's license type and associated risk level, maintenance velocity (commit frequency, last update), community health indicators (stars, forks), supply-chain security findings including vulnerable or suspicious dependencies, and an overall risk assessment to inform safe integration decisions.","failureModes":["Invalid or non-existent repo format (e.g. missing owner or name) returns an error","Private repositories may not be accessible and return an authorization error","GitHub API rate limits could temporarily block scans","Repos with no dependency manifests may return incomplete dependency analysis","Network timeout if GitHub is unresponsive"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adding it as a dependency, executing its code, or adopting it in a project — especially when license compliance, supply-chain integrity, and maintenance health all need to be assessed in a single call. Prefer this over manual GitHub inspection or generic vulnerability scanners when you need a consolidated, agent-ready risk summary for automated decision-making.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:40.904Z","isFirstParty":false,"canonicalSlug":"token-intel-agentdiet-dev-github-repository-supply-chain-license-fc7e93e8"}