{"uid":"cap_U2U-Wvx6_WSm6MUqcGQS8","slug":"polymarket-odds-agentdiet-dev-github-repository-license-dependency-d936c6f9","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://polymarket-odds.agentdiet.dev/v1/license-compliance-scan)","url":"https://polymarket-odds.agentdiet.dev/v1/license-compliance-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_K0GdfZ8Dyfx0zq3elLZhK","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"polymarket-odds.agentdiet.dev","brandSlug":"polymarket-odds-agentdiet-dev-mpp","brandBaseUrl":"https://polymarket-odds.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans any GitHub repository for license risk, maintenance health, popularity signals, and supply-chain security vulnerabilities before code adoption or execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph to our project, can you run a full license compliance and supply-chain security audit on it — I need to know the license type, whether it's actively maintained, its popularity, and any dependency risks?","exampleUseCases":[{"title":"Pre-adoption open-source library vetting","prompt":"I'm thinking of using huggingface/transformers in our commercial product — can you audit that GitHub repo for license compatibility, maintenance activity, and any supply-chain security red flags before I add it as a dependency?"},{"title":"Enterprise license compliance check","prompt":"Our legal team needs to know if modelcontextprotocol/servers uses any copyleft or restrictive licenses that could affect our proprietary codebase — can you scan the repo and give me a license risk report?"},{"title":"Dependency security review before code execution","prompt":"I'm about to run code from openai/openai-python — can you first check if that GitHub repo is actively maintained, how popular it is, and whether there are any known supply-chain security issues with its dependencies?"}],"resultDescription":"Returns a structured report covering the repository's license type and associated legal risk, maintenance velocity metrics (commit frequency, last activity), popularity signals (stars and forks counts), and supply-chain security findings including dependency vulnerability assessments.","failureModes":["Invalid or non-existent repository slug returns an error — ensure the format is owner/name (e.g. langchain-ai/langgraph)","Private repositories that are not publicly accessible will fail to scan","Rate limiting from GitHub's API may cause transient failures","Repositories with no license file may return ambiguous or null license results","Payment required (HTTP 402) if x402 USDC micropayment is not included in the request"],"whenToPreferThis":"Choose this endpoint when you need a pre-adoption security and compliance snapshot of a GitHub repository, especially before integrating a third-party library into a codebase, running untrusted code, or assessing open-source license compatibility for commercial use. It is purpose-built for software supply-chain due diligence combining license, maintenance, popularity, and dependency signals in one call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:22:43.240Z","isFirstParty":false,"canonicalSlug":"polymarket-odds-agentdiet-dev-github-repository-license-dependency-d936c6f9"}