{"uid":"cap_Z_HC6X2g-830mKd6HNHrN","slug":"x402broker-github-repository-security-auditor-a2a95d3f","name":"x402broker GitHub Repository Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://x402broker.com/v1/github-scanner)","url":"https://x402broker.com/v1/github-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"unknown","protocol":"x402","network":"base","amountUsd":null,"per":"call","confidence":"unknown"},{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_PwixS7RtTCazc0R8m8R_N","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null},{"uid":"pm_XqjFW_kHzkvy6irgfWLrA","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits any GitHub repository for license risk, maintenance health, popularity metrics, and supply-chain security before integrating or executing its code.","exampleAgentPrompt":"Before I add this library to my project, can you audit the GitHub repo at github.com/langchain-ai/langchain — check its license risk, how actively it's maintained, its stars and forks, and whether there are any supply-chain security concerns?","exampleUseCases":[{"title":"Pre-integration dependency security check","prompt":"I'm about to add the npm package from github.com/axios/axios to our codebase — can you audit that GitHub repo for license compatibility, maintenance activity, and any supply-chain vulnerabilities before we pull it in?"},{"title":"Open-source license compliance review","prompt":"Our legal team needs to know if github.com/facebook/react uses a license that's safe for commercial use — can you audit it and flag any license risks?"},{"title":"Evaluating unfamiliar third-party library","prompt":"I found a GitHub repo at github.com/psf/requests that I want to use in a production service — can you scan it for security issues, check how actively it's being maintained, and tell me how popular it is?"}],"resultDescription":"Returns a structured security and health report for the specified GitHub repository, including license type and risk classification, maintenance velocity indicators (commit frequency, last update), community popularity metrics (stars, forks, contributor count), and supply-chain security findings such as dependency vulnerabilities or suspicious dependency patterns.","failureModes":["Invalid or non-existent GitHub repository URL returns an error","Private repositories that are inaccessible may return access-denied or empty results","GitHub API rate limits may cause transient failures","Repositories with no dependency manifest files may have incomplete supply-chain analysis","Payment failure via x402 protocol prevents endpoint access"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency, executing its code, or approving it in a software supply chain. It is especially valuable for automated due-diligence pipelines that need to combine license compliance, maintenance health, and security scanning in a single call. Prefer it over manual GitHub inspection or separate SBOM tools when you need a consolidated, machine-readable audit report at low cost ($0.01 per call).","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T12:48:17.750Z","isFirstParty":false,"canonicalSlug":"x402broker-github-repository-security-auditor-a2a95d3f"}