{"uid":"cap_FSzCk2lkfEppwOTPr1rrs","slug":"shopify-spy-agentdiet-dev-github-repository-license-dependency-supply-73bb42ef","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://shopify-spy.agentdiet.dev/v1/repo-audit)","url":"https://shopify-spy.agentdiet.dev/v1/repo-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_yfGPMqO0Ikd-DdpxWQE0m","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"shopify-spy.agentdiet.dev","brandSlug":"shopify-spy-agentdiet-dev-mpp","brandBaseUrl":"https://shopify-spy.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security concerns before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph to my project, can you audit it for license risk, supply-chain security issues, and whether it's actively maintained?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm about to add modelcontextprotocol/servers as a dependency — can you audit it for license risk, maintenance velocity, and any supply-chain security red flags before I commit?"},{"title":"Commercial license compliance check","prompt":"We're building a commercial product and want to use facebook/react — audit the GitHub repo to confirm the license is commercially safe and check if the project is actively maintained."},{"title":"Open source library security review","prompt":"Can you run a security and license audit on huggingface/transformers before my team starts using it? I need to know about any supply-chain risks, how many stars/forks it has, and whether it's still being actively developed."}],"resultDescription":"Returns a structured report covering the repository's detected license type and associated risk level, maintenance velocity indicators (recent commit activity, release cadence), popularity signals (stars, forks), and supply-chain security findings such as dependency vulnerability flags and provenance concerns.","failureModes":["Repository not found or misspelled owner/name slug returns an error","Private or inaccessible repositories cannot be audited","GitHub API rate limits may cause transient failures","Repositories with no license file may return indeterminate license risk","Very new or very large repositories may have incomplete dependency data"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency — especially for license compliance in commercial projects, supply-chain security due diligence, or assessing whether a library is actively maintained. It is particularly useful in agentic CI/CD or dependency-review workflows where automated pre-integration checks are required.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:37.324Z","isFirstParty":false,"canonicalSlug":"shopify-spy-agentdiet-dev-github-repository-license-dependency-supply-73bb42ef"}