{"uid":"cap_LuDYKv8kRpIN262unE7XY","slug":"prompt-guard-agentdiet-dev-github-repository-supply-chain-license-9818df31","name":"GitHub Repository Supply Chain & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://prompt-guard.agentdiet.dev/v1/repo-supply-chain-scan)","url":"https://prompt-guard.agentdiet.dev/v1/repo-supply-chain-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_iYudKAAf0w2Tm_qi3C0js","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"prompt-guard.agentdiet.dev","brandSlug":"prompt-guard-agentdiet-dev-mpp","brandBaseUrl":"https://prompt-guard.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Analyzes a GitHub repository for license risk, dependency supply-chain vulnerabilities, maintenance velocity, and popularity signals before code adoption or execution.","exampleAgentPrompt":"Before I integrate langchain-ai/langgraph into our codebase, can you do a full supply-chain and license audit on it — check for dependency vulnerabilities, license risk, and whether it's actively maintained?","exampleUseCases":[{"title":"Pre-adoption dependency vetting","prompt":"We're thinking of using huggingface/transformers in our product — can you scan it for license issues, supply-chain risks, and check if it's still actively maintained before we commit?"},{"title":"Security review before code execution","prompt":"An AI agent is about to run code from the repo openai/openai-python — can you audit its dependency security and license posture first so I know it's safe to execute?"},{"title":"Open source due diligence for legal team","prompt":"Our legal team needs a license risk report on the GitHub repo apache/airflow — pull the license details, maintenance velocity, and any supply-chain red flags you find."}],"resultDescription":"Returns a structured report covering license type and risk level, maintenance velocity metrics (commit frequency, last commit date), repository popularity signals (stars, forks), and supply-chain security findings including known vulnerable dependencies.","failureModes":["Invalid or non-existent repository owner/name returns an error","Private repositories that are inaccessible to the scanner return an access error","GitHub API rate limits may cause timeouts or partial results","Repos with no detectable dependency manifests may return incomplete supply-chain data","Payment failure (HTTP 402) if x402 payment is not properly configured"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adoption, code execution, or inclusion in a software supply chain. It is especially valuable for pre-flight checks on open source dependencies, license compliance reviews, and security audits — covering aspects that generic code search or GitHub browsing tools do not automatically surface.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:44.015Z","isFirstParty":false,"canonicalSlug":"prompt-guard-agentdiet-dev-github-repository-supply-chain-license-9818df31"}