{"uid":"cap_FFtCy7Vk3GpFZGdxJBMbZ","slug":"x402broker-com-github-repository-license-dependency-supply-chain-f6ccdc40","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://x402broker.com/v1/license-compliance-scan)","url":"https://x402broker.com/v1/license-compliance-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Ql8uUWgqp9O5hSKG85Q3h","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"x402broker.com","brandSlug":"x402broker-com-mpp","brandBaseUrl":"https://x402broker.com","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks metrics, and supply-chain security vulnerabilities before code adoption or execution.","exampleAgentPrompt":"Before I integrate langchain-ai/langgraph into my project, can you audit that GitHub repo for license risks, supply-chain security issues, and check how actively it's being maintained?","exampleUseCases":[{"title":"License compliance check before adoption","prompt":"I'm about to add huggingface/transformers to our codebase — can you audit that GitHub repo and tell me if the license is compatible with a commercial product and whether there are any supply-chain concerns?"},{"title":"Open source health due diligence for new dependency","prompt":"We're evaluating modelcontextprotocol/servers as a dependency — can you check its GitHub repo for maintenance velocity, stars, forks, and any security red flags before we commit?"},{"title":"Pre-deployment security audit for an AI coding agent","prompt":"Before my coding agent executes anything from the openai/openai-python repo, run a full license and supply-chain security audit on it so I know it's safe to use."}],"resultDescription":"Returns a structured report covering the repository's license type and associated legal/commercial risk level, maintenance velocity indicators (recent commits, last update), popularity signals (stars, forks, watchers), and supply-chain security findings such as known malicious dependencies or suspicious package behaviors.","failureModes":["Invalid or non-existent repo format returns an error (repo must be in owner/name format)","Private or inaccessible repositories may return insufficient data or access errors","GitHub API rate limiting may cause intermittent failures or incomplete results","Repos with no license file may return ambiguous license risk assessment","Very new or empty repositories may lack sufficient data for meaningful analysis"],"whenToPreferThis":"Choose this endpoint when you need a quick, structured pre-adoption security and compliance assessment for any public GitHub repository — especially before integrating a new open source dependency into a codebase, automating library selection in a coding agent workflow, or performing due diligence on a project's license compatibility with commercial use. It combines license risk, maintenance health, popularity signals, and supply-chain security into a single call, making it ideal for automated developer pipelines and AI coding agents that need to vet dependencies without manual GitHub inspection.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:45.330Z","isFirstParty":false,"canonicalSlug":"x402broker-com-github-repository-license-dependency-supply-chain-26159f0e"}