{"uid":"cap_FBTcQbZLPMg2RNOkuMr7p","slug":"serp-extract-agentdiet-dev-github-repository-license-dependency-8d689092","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/ci-cd-workflow-audit)","url":"https://serp-extract.agentdiet.dev/v1/ci-cd-workflow-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_KdTBZVw_k7CLAkf2zLEIV","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code adoption or execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you run a full security and license audit on that GitHub repo — I need to know about supply-chain risks, how actively it's maintained, and whether the license is safe for commercial use?","exampleUseCases":[{"title":"Pre-adoption open-source vetting","prompt":"I'm about to use modelcontextprotocol/servers in our product — can you audit that GitHub repo for license compatibility, supply-chain risks, and how well-maintained it is before I pull it in?"},{"title":"CI/CD dependency security gate","prompt":"Before we merge this PR that adds a new dependency, audit the GitHub repo huggingface/transformers for any supply-chain vulnerabilities, problematic licenses, or signs the project is abandoned."},{"title":"Vendor library due diligence","prompt":"My team is evaluating openai/openai-python for a client project — can you check the repo for license risk, maintenance activity, contributor health, and any known security issues in its dependencies?"}],"resultDescription":"Returns a structured audit report covering: license type and commercial risk rating, maintenance velocity indicators (commit frequency, last activity, open issues), repository popularity signals (stars, forks, contributors), and supply-chain/dependency security findings including known vulnerabilities or suspicious packages.","failureModes":["Invalid or non-existent GitHub repository owner/name returns an error","Private or inaccessible repositories cannot be audited","GitHub API rate limiting may cause degraded or incomplete results","Repositories with no license file may return indeterminate license risk","Network or upstream GitHub API outages may cause timeout failures"],"whenToPreferThis":"Use this endpoint when an AI coding agent needs to vet a GitHub repository before adoption — particularly for license compliance screening, supply-chain security checks before CI/CD pipeline integration, or due diligence on open-source dependencies in commercial or regulated projects. Prefer this over generic GitHub API calls when you need a consolidated, pre-scored risk report rather than raw metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:37:31.606Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-github-repository-license-dependency-d3c9b19f"}