{"uid":"cap_FYrSV7tPMrmAy6bTI6o1X","slug":"company-enrich-agentdiet-dev-github-repository-security-license-auditor-45ec1fd1","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://company-enrich.agentdiet.dev/v1/ci-cd-workflow-audit)","url":"https://company-enrich.agentdiet.dev/v1/ci-cd-workflow-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_TWtSU6KqzR7-YJ4oFfF7q","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"company-enrich.agentdiet.dev","brandSlug":"company-enrich-agentdiet-dev-mpp","brandBaseUrl":"https://company-enrich.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, dependency health, stars/forks, and supply-chain security concerns.","exampleAgentPrompt":"Can you audit the langchain-ai/langgraph GitHub repo for me — I need to know its license risk, whether it's actively maintained, its star/fork counts, and any supply-chain security concerns before we start using it in production?","exampleUseCases":[{"title":"License check before commercial use","prompt":"Before we ship this product, can you check the license risk on the huggingface/transformers GitHub repo? I need to know if the license is compatible with our commercial SaaS and whether there are any supply-chain red flags."},{"title":"Dependency vetting in CI/CD pipeline","prompt":"We're about to add modelcontextprotocol/servers as a dependency — can you audit that repo for security vulnerabilities, maintenance health, and license issues so I can decide whether it's safe to pull in?"},{"title":"Open source adoption decision","prompt":"Our team wants to adopt facebook/react-native for a new project. Can you evaluate that GitHub repo for maintenance velocity, community size, dependency vulnerabilities, and any license risks I should be aware of?"}],"resultDescription":"Returns a structured report covering: license type and associated risk level, maintenance velocity indicators (commit frequency, last update), repository popularity metrics (stars, forks), and supply-chain security findings including dependency vulnerabilities and any known risks — enabling an informed decision before integrating or executing code from the repository.","failureModes":["Invalid or non-existent repo format returns an error (repo must be in owner/name format)","Private repositories may return limited or no data","GitHub API rate limits could result in incomplete data","Repos with no license file may return unknown license risk","Very new repos may have insufficient data for meaningful velocity analysis"],"whenToPreferThis":"Choose this endpoint when an AI coding agent, DevSecOps pipeline, or developer needs to vet a GitHub repository before integrating it as a dependency or executing its code — particularly for license compliance checks, supply-chain security assessment, and maintenance health evaluation. Prefer over generic GitHub API calls when you need a single consolidated risk report rather than raw repository metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:22:40.230Z","isFirstParty":false,"canonicalSlug":"company-enrich-agentdiet-dev-github-repository-security-license-auditor-50eddac7"}