{"uid":"cap_EbN4gKtWjr9GlKQv0cMbF","slug":"serp-extract-agentdiet-dev-github-repository-security-license-risk-404d5298","name":"GitHub Repository Security & License Risk Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/repo-risk-score)","url":"https://serp-extract.agentdiet.dev/v1/repo-risk-score?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Nk-rM0Kr43twIjcas9tZw","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code integration or execution.","exampleAgentPrompt":"Can you audit the langchain-ai/langgraph GitHub repo and tell me if it's safe to use — specifically flag any license risks, supply-chain issues, and whether it's actively maintained?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"Before I add huggingface/transformers as a dependency, can you check its GitHub repo for license compatibility, maintenance health, and any supply-chain security red flags?"},{"title":"Open source license compliance check","prompt":"I need to know if the license on the facebook/react GitHub repo is compatible with my commercial product — can you score its license risk and flag anything I should worry about?"},{"title":"Coding agent pre-execution safety gate","prompt":"My AI agent is about to clone and run code from pallets/flask — can you first audit that GitHub repo for supply-chain security issues, check how actively it's maintained, and give me an overall risk score?"}],"resultDescription":"Returns a structured risk assessment object covering: license type and risk classification, maintenance velocity indicators (commit frequency, last activity), repository popularity signals (stars, forks), supply-chain security flags (dependency vulnerabilities, suspicious patterns), and an overall risk score for the repository.","failureModes":["Invalid or non-existent repo format returns an error (repo must be in owner/name format)","Private or inaccessible repositories may return incomplete data or an access error","GitHub API rate limiting may cause transient failures","Repositories with no license file may return ambiguous license risk results","Very new repositories with minimal history may produce low-confidence maintenance scores"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a fast, pre-flight security and risk check on a GitHub repository before cloning, integrating, or executing its code. It is especially valuable in automated pipelines where dependency vetting, license compliance, and supply-chain security must be verified programmatically. Prefer this over manual GitHub inspection when you need a structured, scorable risk assessment rather than raw repository metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:33:12.853Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-github-repository-security-license-risk-d6860b23"}