{"uid":"cap_ZjmeaT6GM1DsEaiPrOH7C","slug":"serp-extract-agentdiet-dev-github-repository-license-dependency-ec0fd70f","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/license-compliance-scan)","url":"https://serp-extract.agentdiet.dev/v1/license-compliance-scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_7lE9kFB_O9O7DqFl1SPy6","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, popularity signals, and supply-chain security vulnerabilities before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph to our codebase, can you audit it for license risk, supply-chain vulnerabilities, and check its maintenance health like stars, forks, and recent commit activity?","exampleUseCases":[{"title":"Pre-integration dependency license check","prompt":"I'm about to use huggingface/transformers in a commercial product — can you scan it for license risk and let me know if there are any restrictions that could be a problem for us?"},{"title":"Supply-chain security review before code execution","prompt":"Before our team runs any code from denoland/deno, can you do a full supply-chain security audit and flag any suspicious dependencies or maintenance red flags?"},{"title":"Evaluating open-source project health","prompt":"We're considering contributing to remix-run/remix — can you check its maintenance velocity, how active the community is, and whether there are any security concerns in its dependency tree?"}],"resultDescription":"Returns a structured assessment of the GitHub repository including license type and associated risk level, supply-chain security findings (vulnerable or suspicious dependencies), maintenance velocity indicators (commit frequency, last activity), and popularity signals (stars, forks count).","failureModes":["Invalid or non-existent repository format returns an error","Private or inaccessible GitHub repositories may fail to scan","GitHub API rate limits could cause intermittent failures","Repositories with unusual or missing license files may produce incomplete license assessments","Very large repositories with complex dependency trees may have incomplete results"],"whenToPreferThis":"Choose this endpoint when an AI agent or developer needs to vet a GitHub repository before integrating it as a dependency, executing its code, or adopting it in a commercial product — specifically when license compliance, supply-chain security, and project health all need to be evaluated in a single call. Prefer this over generic GitHub API queries when you need a composite risk score that combines license analysis, vulnerability scanning, and maintenance signals together.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:36:39.420Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-github-repository-license-dependency-d3c9b19f"}