{"uid":"cap_TbXOCaMjtzcZ3vU8qgSdi","slug":"preflight-agentdiet-dev-github-repository-security-license-auditor-81e758ec","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://preflight.agentdiet.dev/v1/github-secops-auditor)","url":"https://preflight.agentdiet.dev/v1/github-secops-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_qkdLyUYFozmVbm-RnUM-O","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"preflight.agentdiet.dev","brandSlug":"preflight-agentdiet-dev-mpp","brandBaseUrl":"https://preflight.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits any GitHub repository for license risk, maintenance health, popularity signals, and supply-chain security vulnerabilities before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph to my project, can you run a security and license audit on it — I want to know about any supply-chain risks, whether it's actively maintained, and if the license is safe to use commercially?","exampleUseCases":[{"title":"Pre-integration open source vetting","prompt":"I'm about to use modelcontextprotocol/servers in our production codebase — can you audit that GitHub repo for license risk, supply-chain security issues, and tell me how actively maintained it is?"},{"title":"License compliance check for enterprise use","prompt":"Our legal team needs to know if the license on huggingface/transformers is safe for commercial use — can you audit that GitHub repo and flag any license risks?"},{"title":"Evaluating a lesser-known dependency","prompt":"I found a GitHub repo called frdel/agent-zero that I want to run locally — can you check if it has any supply-chain security red flags, how popular it is, and whether it's been recently maintained?"}],"resultDescription":"Returns a structured assessment of the GitHub repository including license type and risk level, maintenance velocity metrics (recent commit activity, last update), popularity signals (stars, forks), and supply-chain security findings such as dependency vulnerabilities or suspicious package behaviors.","failureModes":["Invalid or non-existent repository (owner/name not found on GitHub) returns an error","Rate limiting from GitHub API may cause degraded or failed responses","Private repositories are inaccessible and will return an access error","Repositories with no dependency manifest files may return incomplete supply-chain data","Network or upstream GitHub API outages may cause timeouts"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency, forking it, or executing its code — especially when license compliance, supply-chain integrity, or maintenance health are concerns. Prefer this over raw GitHub API calls when you need a pre-processed, risk-scored summary rather than raw metadata. Best suited for automated pre-flight checks in CI/CD pipelines or agent workflows that evaluate open source libraries.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:44.556Z","isFirstParty":false,"canonicalSlug":"preflight-agentdiet-dev-github-repository-security-license-auditor-755119c7"}