{"uid":"cap_KPz7aoyOVSOjGRRfBQjtq","slug":"github-audit-agentdiet-dev-github-repository-license-dependency-4b19cff4","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/license-compliance-scan)","url":"https://github-audit.agentdiet.dev/v1/license-compliance-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_NlrF8Zz2zfp-Ey7tev6Ai","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"github-audit.agentdiet.dev","brandSlug":"github-audit-agentdiet-dev-mpp","brandBaseUrl":"https://github-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance velocity, stars/forks metrics, and supply-chain security vulnerabilities before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit it on GitHub for license risks, how actively it's maintained, its stars and forks, and any supply-chain security concerns?","exampleUseCases":[{"title":"Pre-integration repo license check","prompt":"I want to use the repo huggingface/transformers in my commercial product — can you audit it for license risk and tell me if there are any supply-chain security issues I should know about?"},{"title":"OSS dependency due diligence","prompt":"Before my team depends on modelcontextprotocol/servers, run a full GitHub audit on it: license compliance, maintenance velocity, community trust signals like stars and forks, and any dependency security flags."},{"title":"Coding agent safety gate","prompt":"My AI coding agent is about to pull in vercel/next.js — can you quickly scan that GitHub repo for risky licenses, stale maintenance, and supply-chain vulnerabilities so I know it's safe to proceed?"}],"resultDescription":"Returns a structured report covering: the repository's detected license and associated legal risk level, maintenance velocity indicators (commit frequency, last activity), community signals (star and fork counts), and supply-chain security findings including flagged dependencies or known vulnerabilities.","failureModes":["Invalid or non-existent repository name returns an error (repo not found)","Private repositories inaccessible to the API return an authorization error","GitHub API rate limiting may cause transient failures or incomplete data","Repositories with no license file may return a 'license unknown' risk flag","Malformed owner/name format in the repo parameter causes a validation error"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-flight safety check on a GitHub repository — specifically to assess license compatibility, supply-chain risk, and maintenance health — before integrating, executing, or depending on that repo's code. It is especially valuable as an automated gate in agentic workflows that autonomously pull in open-source dependencies.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:55.305Z","isFirstParty":false,"canonicalSlug":"github-audit-agentdiet-dev-github-repository-license-dependency-4b19cff4"}