{"uid":"cap_Ssmj0Eeu9IorPAzAh28_x","slug":"serp-extract-agentdiet-dev-github-repository-license-dependency-d3c9b19f","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/sbom-auditor)","url":"https://serp-extract.agentdiet.dev/v1/sbom-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"},"limit":{"type":"integer","default":20,"maximum":100,"minimum":1,"description":"Maximum number of items to return per page (1-100)"},"cursor":{"type":"string","description":"Opaque pagination cursor for fetching the next page"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_W6bGZzs97lYW9RsGmNQeV","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risk, supply-chain security issues, and how actively it's maintained?","exampleUseCases":[{"title":"Pre-integration open-source library vetting","prompt":"I'm thinking of using huggingface/transformers in our production codebase — can you audit that GitHub repo for any copyleft license risks, known supply-chain issues, and tell me how healthy the project is in terms of maintenance and stars?"},{"title":"Coding agent dependency safety check","prompt":"Before my coding agent installs dependencies from openai/openai-python, can you run a security and license audit on that GitHub repo so I know it's safe to use?"},{"title":"Vendor open-source due diligence","prompt":"We're evaluating a vendor who uses vercel/next.js as a core dependency — audit that GitHub repo and give me a license risk and supply-chain security assessment for our compliance team."}],"resultDescription":"Returns a structured report covering license risk classification, maintenance velocity indicators (commit frequency, last update), repository popularity metrics (stars, forks), supply-chain security findings, and SBOM-related dependency audit results for the specified GitHub repository.","failureModes":["Invalid or non-existent repository (owner/name format incorrect) returns an error","Private repositories that are inaccessible return an access error","GitHub API rate limiting may cause failures under high request volume","Repositories with no detectable dependencies may return partial SBOM data","Payment failure (x402) blocks the request before processing"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adopting it as a dependency, executing its code, or integrating it into a project — especially when license compliance, supply-chain trust, and maintenance health are all needed in a single call. Prefer it over raw GitHub API calls when you want pre-processed risk signals rather than raw metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:38.310Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-github-repository-license-dependency-d3c9b19f"}