{"uid":"cap_eHiyBj06fqsHKoSDXq6Ke","slug":"cve-intel-agentdiet-dev-github-repository-dependency-license-security-0802b78e","name":"GitHub Repository Dependency & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://cve-intel.agentdiet.dev/v1/dependency-audit)","url":"https://cve-intel.agentdiet.dev/v1/dependency-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Pqu8RzvXPmwNmdphfLWpQ","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"cve-intel.agentdiet.dev","brandSlug":"cve-intel-agentdiet-dev-mpp","brandBaseUrl":"https://cve-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance health, popularity signals, and supply-chain security vulnerabilities before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit it for license risks, check how actively it's maintained, and flag any supply-chain security issues?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm about to pull in modelcontextprotocol/servers into our product — can you audit it for license risk, see how actively it's maintained, and let me know if there are any supply-chain security red flags?"},{"title":"Open source license compliance check","prompt":"Our legal team needs to know if huggingface/transformers carries any GPL or copyleft license risks before we ship it in a commercial product — can you check?"},{"title":"Security scan before code execution","prompt":"I want to run some code from the openai/openai-python repo — can you first audit it for any dependency vulnerabilities or supply-chain security issues so I know it's safe?"}],"resultDescription":"Returns a structured assessment of the GitHub repository including: license type and associated risk level, maintenance velocity metrics (commit frequency, last activity), community signals (stars, forks), and supply-chain security findings such as known CVEs or vulnerable dependencies.","failureModes":["Invalid or non-existent repo format returns an error (e.g. missing owner or name segment)","Private or inaccessible repositories may return insufficient data or an access error","GitHub API rate limiting may cause incomplete results","Repos with no dependency manifest files may yield limited supply-chain analysis","Network or upstream GitHub API failures may result in a timeout or partial response"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-flight safety check on a GitHub repository before importing, executing, or shipping its code. It is particularly valuable for license compliance screening in commercial projects, supply-chain risk assessment in automated pipelines, and evaluating whether an open-source dependency is actively maintained. Prefer this over generic code search tools when you need a structured, multi-dimensional security and governance report on a specific repo.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:18:49.254Z","isFirstParty":false,"canonicalSlug":"cve-intel-agentdiet-dev-github-repository-dependency-license-security-f9c930a5"}