{"uid":"cap_FhUV8atRPMXPZ66CKZsmp","slug":"cve-intel-agentdiet-dev-github-repo-dependency-license-security-auditor-016757bb","name":"GitHub Repo, Dependency & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://cve-intel.agentdiet.dev/v1/repo-audit)","url":"https://cve-intel.agentdiet.dev/v1/repo-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_DeGtxmv9P7HJLhMmnuOtC","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"cve-intel.agentdiet.dev","brandSlug":"cve-intel-agentdiet-dev-mpp","brandBaseUrl":"https://cve-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance velocity, stars/forks activity, and supply-chain security vulnerabilities before integrating or executing code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency in my project, can you audit its GitHub repo for license risks, supply-chain security issues, and check how actively it's maintained?","exampleUseCases":[{"title":"Pre-integration dependency security check","prompt":"I'm about to use modelcontextprotocol/servers in my agent. Can you audit its GitHub repo for any supply-chain security risks, license issues, and tell me how actively it's being maintained?"},{"title":"License compliance review before shipping","prompt":"Our legal team needs to know if huggingface/transformers uses a permissive or restrictive license — can you run a full audit on that GitHub repo including its maintenance health and star count?"},{"title":"Vetting a third-party tool before code execution","prompt":"Before I let my coding agent run code from openai/openai-python, can you check the repo's security posture, dependency risks, and whether it's still actively maintained?"}],"resultDescription":"Returns a structured audit report covering license type and associated risk, maintenance velocity indicators (commit frequency, last update), community signals (stars, forks), and supply-chain security findings for the specified GitHub repository.","failureModes":["Invalid or non-existent repo format returns an error (repo must be in owner/name format)","Private or inaccessible GitHub repositories may return insufficient data or an access error","GitHub API rate limits may cause partial or failed responses","Payment failure via x402 results in HTTP 402 and no audit data","Repos with no dependency manifest files may return limited supply-chain results"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-integration security and health assessment of a GitHub repository — especially before adding a new open-source dependency, executing third-party code, or evaluating a library for production use. It combines license risk, maintenance health, and supply-chain security in a single call, making it ideal for automated due diligence workflows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:31:04.261Z","isFirstParty":false,"canonicalSlug":"cve-intel-agentdiet-dev-github-repo-dependency-license-security-auditor-016757bb"}