{"uid":"cap_GgMaVsl7-wUxll376b5oB","slug":"email-verify-agentdiet-dev-github-repository-supply-chain-security-8a5447dd","name":"GitHub Repository Supply Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://email-verify.agentdiet.dev/v1/repo-supply-chain-scan)","url":"https://email-verify.agentdiet.dev/v1/repo-supply-chain-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_vAkM33ifa_KyrkfQTiP2Y","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"email-verify.agentdiet.dev","brandSlug":"email-verify-agentdiet-dev-mpp","brandBaseUrl":"https://email-verify.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans a GitHub repository for license risk, dependency vulnerabilities, maintenance health, and supply-chain security signals before code execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you run a supply chain security audit on it — check the license risk, how actively it's maintained, and any known dependency vulnerabilities?","exampleUseCases":[{"title":"Pre-integration license compliance check","prompt":"I'm about to use modelcontextprotocol/servers in a commercial product — can you audit it for license risk and tell me if there are any copyleft or incompatible licenses I should worry about?"},{"title":"Dependency security vetting for CI pipeline","prompt":"Before we merge this PR that adds openai/openai-python as a dependency, can you scan that GitHub repo for supply chain vulnerabilities and maintenance health?"},{"title":"Open source library adoption assessment","prompt":"We're evaluating huggingface/transformers for our ML platform — can you check its GitHub stats, how actively it's maintained, and whether there are any security red flags in its supply chain?"}],"resultDescription":"Returns a structured security audit report covering license type and risk classification, repository maintenance velocity (commit frequency, last activity), popularity signals (stars, forks), and supply-chain security findings including dependency vulnerability indicators.","failureModes":["Invalid or non-existent repository format returns an error (repo must be in owner/name format)","Private repositories may be inaccessible and return an access error","GitHub API rate limits may cause transient failures","Repositories with no dependency manifests may return partial results","Payment failure via x402 returns 402 with payment required details"],"whenToPreferThis":"Choose this endpoint when an AI coding agent needs to vet a GitHub repository before adopting it as a dependency or executing its code — especially when license compatibility, supply-chain safety, and maintenance health all need to be checked together in a single call. Prefer this over manual GitHub inspection when automating dependency review in CI/CD pipelines or agent workflows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:43.518Z","isFirstParty":false,"canonicalSlug":"email-verify-agentdiet-dev-github-repository-supply-chain-security-8a5447dd"}