{"uid":"cap_VcFKAPquWJuXtjVGvU49G","slug":"arxiv-digest-agentdiet-dev-github-repository-license-supply-chain-5910d581","name":"GitHub Repository License & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://arxiv-digest.agentdiet.dev/v1/sbom-auditor)","url":"https://arxiv-digest.agentdiet.dev/v1/sbom-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_9htWztK7ii5WzJvEiFZi_","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"arxiv-digest.agentdiet.dev","brandSlug":"arxiv-digest-agentdiet-dev-mpp","brandBaseUrl":"https://arxiv-digest.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks metrics, dependency vulnerabilities, and supply-chain security posture.","exampleAgentPrompt":"Before I integrate langchain-ai/langgraph into our project, can you audit that GitHub repo for license risks, supply-chain vulnerabilities, and check how actively it's maintained?","exampleUseCases":[{"title":"Pre-integration open-source due diligence","prompt":"I'm about to add modelcontextprotocol/servers as a dependency — can you audit it for any copyleft license issues, known vulnerabilities in its dependencies, and tell me if it's actively maintained?"},{"title":"Coding agent safety check before execution","prompt":"Before running any code from the huggingface/transformers GitHub repo, audit it for supply-chain security risks, suspicious dependencies, and license compliance issues."},{"title":"Enterprise OSS procurement review","prompt":"My team wants to adopt vercel/next.js — can you pull a full security and license audit of that GitHub repo including maintenance velocity and any red flags in the dependency chain?"}],"resultDescription":"Returns a structured audit report covering: license type and risk level, maintenance velocity indicators (commit frequency, last commit date), repository popularity metrics (stars, forks), supply-chain security assessment, and any flagged vulnerable or high-risk dependencies found in the SBOM.","failureModes":["Repository not found or invalid owner/name format returns an error","Private repositories inaccessible without credentials return an access error","GitHub API rate limiting may cause transient failures","Repositories with no dependency manifest files may return partial SBOM data","Payment failure (HTTP 402) if x402 payment is not processed"],"whenToPreferThis":"Choose this endpoint when you need a combined license compliance, maintenance health, and supply-chain security evaluation for a GitHub repository in a single call — especially before integrating an open-source dependency into a production codebase or before an AI coding agent executes code from an unfamiliar repo.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:39.340Z","isFirstParty":false,"canonicalSlug":"arxiv-digest-agentdiet-dev-github-repository-license-supply-chain-5910d581"}