{"uid":"cap_hLyU2mu9IbhHISEsZYW1o","slug":"arxiv-digest-agentdiet-dev-github-repository-security-license-auditor-02d798ba","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://arxiv-digest.agentdiet.dev/v1/github-scanner)","url":"https://arxiv-digest.agentdiet.dev/v1/github-scanner?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_AE_q8aL4xuI_vrXHTQvkA","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"arxiv-digest.agentdiet.dev","brandSlug":"arxiv-digest-agentdiet-dev-mpp","brandBaseUrl":"https://arxiv-digest.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code integration.","exampleAgentPrompt":"Before I add it as a dependency, can you run a full security and license audit on the GitHub repo langchain-ai/langgraph — I want to know its license risk, how actively it's maintained, its star/fork counts, and any supply-chain vulnerabilities?","exampleUseCases":[{"title":"Pre-integration dependency security check","prompt":"I'm about to use huggingface/transformers in my production ML pipeline — can you audit it for license compatibility, maintenance activity, and any known supply-chain security issues?"},{"title":"Open source license compliance review","prompt":"My legal team needs to know if the license on the repo facebook/react is safe for commercial use — can you scan it and give me a license risk assessment?"},{"title":"Vetting an unfamiliar coding agent tool","prompt":"Before I let my coding agent run code from modelcontextprotocol/servers, can you check that repo for supply-chain vulnerabilities, how well-maintained it is, and what its overall security posture looks like?"}],"resultDescription":"Returns a structured report covering license type and risk level, repository maintenance velocity (commit frequency, last update), popularity signals (stars, forks), and supply-chain security indicators such as dependency vulnerabilities — helping agents decide whether a repository is safe to depend on or execute.","failureModes":["Invalid or non-existent repo format returns an error (e.g. missing owner/name structure)","Private repositories that are inaccessible to the scanner will fail with an access error","GitHub API rate limiting may cause transient failures or incomplete results","Repos with no license file may return an unknown/undetermined license risk","Network timeouts for very large repositories with many dependencies"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adding it as a dependency, running its code, or integrating it into a pipeline — especially for license compliance, supply-chain security, or maintenance health checks. Prefer this over manual GitHub browsing when automation and structured risk output are needed.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:37:13.945Z","isFirstParty":false,"canonicalSlug":"arxiv-digest-agentdiet-dev-github-repository-security-license-auditor-93f924bb"}