{"uid":"cap_f-y4uhZBd4InA5_mgi38H","slug":"workflows-agentdiet-dev-github-repository-license-dependency-supply-e4552062","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://workflows.agentdiet.dev/v1/github)","url":"https://workflows.agentdiet.dev/v1/github?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_kTqCJ2_by0KHE9NEJ_Es5","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"workflows.agentdiet.dev","brandSlug":"workflows-agentdiet-dev-mpp","brandBaseUrl":"https://workflows.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security signals before integrating or executing code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risk, how actively it's maintained, and any supply-chain security concerns?","exampleUseCases":[{"title":"Pre-integration dependency safety check","prompt":"I'm about to integrate modelcontextprotocol/servers into my project — can you audit it for license compatibility, maintenance velocity, and any supply-chain security red flags?"},{"title":"Open source due diligence for procurement","prompt":"Our security team needs a report on huggingface/transformers before we approve it for production use — check the license risk, how actively it's maintained, stars/forks, and any known dependency security issues."},{"title":"Evaluating an unfamiliar library before use","prompt":"I found a smaller GitHub project called tiangolo/fastapi that I want to use — can you audit it for license risk, whether it's still actively maintained, and supply-chain security concerns?"}],"resultDescription":"Returns a structured assessment of the GitHub repository including license type and risk classification, maintenance velocity indicators (commit frequency, recency), community health metrics (stars, forks), and supply-chain security signals such as dependency vulnerabilities and suspicious package patterns.","failureModes":["Invalid or non-existent repository format returns an error (repo must be in owner/name format)","Private repositories inaccessible without authentication may return 404 or limited data","GitHub API rate limiting may cause transient failures or incomplete results","Repositories with no releases or sparse metadata may return incomplete analysis","Payment failure via x402 returns 402 and no analysis is performed"],"whenToPreferThis":"Choose this endpoint when an AI coding agent needs to vet a GitHub repository before adding it as a dependency, executing its code, or recommending it — especially when license compatibility, active maintenance, and supply-chain trustworthiness all matter. Prefer it over raw GitHub API calls when you need an opinionated risk summary rather than raw metadata. Use it before OSV.dev package CVE scanning when you want repository-level health signals rather than specific CVE lookups.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:26.863Z","isFirstParty":false,"canonicalSlug":"workflows-agentdiet-dev-github-repository-license-dependency-supply-e4552062"}