{"uid":"cap_cWojRPefz3RpbJoA-QPsh","slug":"github-audit-agentdiet-dev-github-repo-supply-chain-license-security-e4f87a61","name":"GitHub Repo Supply Chain & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/repo-supply-chain-scan)","url":"https://github-audit.agentdiet.dev/v1/repo-supply-chain-scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_3GkdGoxbdeDOW_gs_GJBq","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"github-audit.agentdiet.dev","brandSlug":"github-audit-agentdiet-dev-mpp","brandBaseUrl":"https://github-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans a GitHub repository for license risk, dependency vulnerabilities, maintenance health, and supply-chain security concerns before integrating or executing code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risk, supply-chain vulnerabilities, and maintenance health?","exampleUseCases":[{"title":"Pre-integration open source due diligence","prompt":"I'm about to use modelcontextprotocol/servers in my production app — can you scan that GitHub repo for any license issues, security vulnerabilities in its dependencies, and tell me how actively it's maintained?"},{"title":"AI coding agent pre-execution safety check","prompt":"Before you run any code from the huggingface/transformers repo, scan it for supply-chain risks, suspicious dependency patterns, and license conflicts so I know it's safe to execute."},{"title":"OSS library compliance audit for enterprise use","prompt":"My team is evaluating pandas-dev/pandas for enterprise use — audit that GitHub repo for license compatibility risks and dependency security issues so I can share a risk report with legal."}],"resultDescription":"Returns a structured report covering the repository's license type and associated risk level, maintenance velocity indicators (commit frequency, last commit date), community signals (stars, forks), and supply-chain security findings including dependency vulnerability flags and any suspicious package patterns.","failureModes":["Invalid or nonexistent repository (owner/name not found on GitHub) returns an error","Private repositories that are inaccessible to the scanner return an access error","GitHub API rate limiting may cause transient failures","Repositories with no dependency manifest files may return incomplete dependency analysis","Malformed repo string (not in owner/name format) triggers validation error"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency, executing its code, or recommending it to others — especially when license compliance, supply-chain integrity, or maintenance health are concerns. Prefer this over generic search or README-reading approaches when you need structured, machine-readable risk signals rather than raw repository metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:34:19.501Z","isFirstParty":false,"canonicalSlug":"github-audit-agentdiet-dev-github-repo-supply-chain-license-security-e4f87a61"}