{"uid":"cap_MFHRr9308UxohKII23Wy5","slug":"hn-pulse-agentdiet-dev-github-repository-dependency-license-security-974c9e5f","name":"GitHub Repository Dependency & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://hn-pulse.agentdiet.dev/v1/dependency-audit)","url":"https://hn-pulse.agentdiet.dev/v1/dependency-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_UzCt_xzPRszP_HmgU3nNC","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"hn-pulse.agentdiet.dev","brandSlug":"hn-pulse-agentdiet-dev-mpp","brandBaseUrl":"https://hn-pulse.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Analyzes a GitHub repository for license risk, maintenance velocity, popularity signals (stars/forks), and supply-chain security vulnerabilities before code execution or dependency adoption.","exampleAgentPrompt":"Before I add langchain-ai/langgraph to our project, can you audit that GitHub repo for license risk, how actively it's maintained, its stars and forks, and any supply-chain security concerns?","exampleUseCases":[{"title":"Pre-adoption dependency safety check","prompt":"I'm thinking of using modelcontextprotocol/servers as a dependency — can you audit the repo for license compatibility, maintenance health, and any supply-chain security red flags before I commit to it?"},{"title":"Open source license compliance review","prompt":"Our legal team needs to know if huggingface/transformers has any copyleft license risk that could affect our commercial product — can you pull the license details and risk assessment for that repo?"},{"title":"Evaluating a new AI framework for production","prompt":"We're considering adopting mistralai/mistral-src for a production service — please check how actively it's maintained, how popular it is, and whether there are any known supply-chain security issues."}],"resultDescription":"Returns a structured report covering the repository's license type and associated risk level, maintenance velocity (commit frequency, last updated), popularity metrics (stars and forks counts), and supply-chain security findings such as known vulnerable dependencies or suspicious package behavior.","failureModes":["Invalid or non-existent repository slug returns an error or empty result","Private repositories that are not publicly accessible cannot be audited","Rate limiting from GitHub API may delay or block analysis","Repositories with no dependency manifest files may return incomplete supply-chain data","Ambiguous owner/name format (missing slash separator) may cause parsing errors"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer workflow needs to vet a GitHub repository before adopting it as a dependency — especially to catch license incompatibilities, assess ongoing maintainer activity, or flag supply-chain risks. Prefer this over raw GitHub API calls when you need a pre-packaged security + compliance summary in one response at minimal cost ($0.01/call).","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:24:36.433Z","isFirstParty":false,"canonicalSlug":"hn-pulse-agentdiet-dev-github-repository-dependency-license-security-974c9e5f"}