{"uid":"cap_TxS85rnT8_fomXx0mUH1e","slug":"alpha-stream-agentdiet-dev-github-repository-license-supply-chain-2e8b1287","name":"GitHub Repository License & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://alpha-stream.agentdiet.dev/v1/license-compliance-scan)","url":"https://alpha-stream.agentdiet.dev/v1/license-compliance-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_f2zk6pb4YG4fREOvfmVyh","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"alpha-stream.agentdiet.dev","brandSlug":"alpha-stream-agentdiet-dev-mpp","brandBaseUrl":"https://alpha-stream.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans a GitHub repository for license risk, dependency vulnerabilities, maintenance velocity, and supply-chain security posture before code adoption or execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph to my project, can you audit it for license compatibility issues, dependency vulnerabilities, and check how actively maintained it is?","exampleUseCases":[{"title":"Pre-integration open source vetting","prompt":"I'm thinking of using modelcontextprotocol/servers in our production codebase — can you run a full security and license audit on it so I know if there are any supply-chain risks or incompatible licenses before we integrate it?"},{"title":"Legal license compliance check","prompt":"Our legal team needs to know if the license on huggingface/transformers is compatible with our commercial product — can you scan that GitHub repo and tell me what license it uses and whether there are any compliance red flags?"},{"title":"OSS dependency health review","prompt":"Can you check how healthy and well-maintained the vercel/next.js GitHub repo is? I want to see the maintenance velocity, star and fork counts, and whether there are any known supply-chain security issues with its dependencies."}],"resultDescription":"Returns a structured report covering the repository's detected license type and associated legal risk level, dependency vulnerability findings, maintenance velocity indicators (commit frequency, last update), community signals (stars, forks, contributor count), and an overall supply-chain security assessment to inform safe adoption decisions.","failureModes":["Invalid or non-existent repository format returns an error (repo must be owner/name)","Private repositories may not be accessible, returning a permissions or not-found error","GitHub API rate limits may cause intermittent failures or incomplete data","Repositories with no license file may return unknown license risk","Payment failure (HTTP 402) if x402 micropayment is not completed"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-adoption security and compliance gate for any GitHub repository — especially before executing, integrating, or depending on third-party open source code. Ideal for automating license compliance checks in CI/CD pipelines, vetting new dependencies, or flagging supply-chain risks before code review.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:22.016Z","isFirstParty":false,"canonicalSlug":"alpha-stream-agentdiet-dev-github-repository-license-supply-chain-2e8b1287"}