{"uid":"cap_TjANLHAV9H_J0HV7qbYS1","slug":"alpha-stream-agentdiet-dev-github-repository-security-license-auditor-7a0d1e51","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://alpha-stream.agentdiet.dev/v1/code-security)","url":"https://alpha-stream.agentdiet.dev/v1/code-security?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_OX_bkibiN91w0JurhG4Rc","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"alpha-stream.agentdiet.dev","brandSlug":"alpha-stream-agentdiet-dev-mpp","brandBaseUrl":"https://alpha-stream.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance activity, popularity metrics, and supply-chain security vulnerabilities before code execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit it for license risks, supply-chain security issues, and check how actively it's being maintained?","exampleUseCases":[{"title":"Pre-integration open source vetting","prompt":"I'm about to add modelcontextprotocol/servers to our project — can you audit it for license compatibility, any supply-chain security red flags, and tell me how well-maintained it is?"},{"title":"Evaluating a new AI framework","prompt":"We're considering using huggingface/transformers in our production code. Can you check its license risk, dependency vulnerabilities, and maintenance velocity so we can decide if it's safe to adopt?"},{"title":"Security review before code execution","prompt":"My coding agent wants to run code from the repo openai/openai-python — can you do a security audit on it first? I need to know about license issues, stars, forks, and any supply-chain concerns."}],"resultDescription":"Returns a structured assessment of the GitHub repository including license type and risk level, maintenance velocity indicators (commit frequency, last update), popularity metrics (stars, forks), and supply-chain security findings such as dependency vulnerabilities or suspicious packages.","failureModes":["Invalid or non-existent repository — repo not found on GitHub returns an error","Malformed repo format (not owner/name) triggers a validation error","Rate limiting on GitHub's API may cause delays or partial results","Private repositories may not be accessible and return an access error","Repository with no releases or very sparse history may yield limited maintenance metrics"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency or executing its code — particularly when license compatibility, supply-chain security, or maintenance health are concerns. It is purpose-built for pre-execution due-diligence on open source repos, combining license, dependency, and activity signals in a single call, making it faster than assembling this data from multiple GitHub API calls manually.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:39:33.820Z","isFirstParty":false,"canonicalSlug":"alpha-stream-agentdiet-dev-github-repository-security-license-auditor-1c30994c"}