{"uid":"cap_cQzb6jZg0L8jo-QAIrrip","slug":"x402broker-com-github-repository-security-license-auditor-741421a7","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://x402broker.com/v1/sbom-auditor)","url":"https://x402broker.com/v1/sbom-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_HY0lby4laaHt8uNCvbsyH","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"x402broker.com","brandSlug":"x402broker-com-mpp","brandBaseUrl":"https://x402broker.com","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, supply-chain security, maintenance velocity, and dependency health before code integration or execution.","exampleAgentPrompt":"Before I integrate it, can you run a full security and license audit on the langchain-ai/langgraph GitHub repo — I need to know about license risks, how well-maintained it is, and any supply-chain vulnerabilities?","exampleUseCases":[{"title":"Pre-integration license compliance check","prompt":"Can you audit the huggingface/transformers GitHub repo and tell me if its license is safe for use in a commercial product, and flag any dependency license conflicts?"},{"title":"Supply-chain risk assessment before deployment","prompt":"Before we ship this, can you check openai/openai-python on GitHub for any supply-chain security issues or known vulnerable dependencies I should know about?"},{"title":"Evaluating an unfamiliar open source project","prompt":"I'm considering adopting tiangolo/fastapi — can you check how actively maintained it is, look at stars and forks, and flag any security or license red flags?"}],"resultDescription":"Returns a structured report covering the repository's license type and risk level, maintenance velocity indicators (commit frequency, last updated), popularity metrics (stars, forks), supply-chain security findings, and dependency vulnerability summary based on SBOM analysis.","failureModes":["Invalid or non-existent repository slug returns an error — must use exact owner/name format","Private repositories cannot be audited — only public GitHub repos are supported","Rate limits or GitHub API unavailability may cause transient failures","Repos with no dependency files may return limited SBOM data","Malformed repo parameter (e.g. missing owner prefix) returns a validation error"],"whenToPreferThis":"Choose this endpoint when an AI agent or developer needs a holistic pre-adoption audit of a GitHub repository — combining license compliance, supply-chain security, and maintenance health in a single call — rather than querying CVE databases or GitHub API separately. Especially valuable for coding agents performing automated dependency vetting before code execution or integration.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:37.324Z","isFirstParty":false,"canonicalSlug":"x402broker-com-github-repository-security-license-auditor-c385f63f"}