{"uid":"cap_i80dmkrmApDCcSfdaI19C","slug":"alpha-stream-agentdiet-dev-github-repository-supply-chain-license-c7a8531d","name":"GitHub Repository Supply Chain & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://alpha-stream.agentdiet.dev/v1/repo-supply-chain-scan)","url":"https://alpha-stream.agentdiet.dev/v1/repo-supply-chain-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_J9OELb5XBMEYDa3oWmzR6","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"alpha-stream.agentdiet.dev","brandSlug":"alpha-stream-agentdiet-dev-mpp","brandBaseUrl":"https://alpha-stream.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans a GitHub repository for license risk, dependency supply-chain vulnerabilities, maintenance velocity, and community health metrics before code integration or execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you run a full supply-chain and license security audit on it — I need to know about any license risks, how actively it's maintained, and whether there are any dependency vulnerabilities?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm about to add modelcontextprotocol/servers to our codebase — can you audit it for license issues, supply-chain risks, and tell me how healthy the maintenance looks before I pull it in?"},{"title":"Open source license compliance check","prompt":"Our legal team needs to know the license risk of huggingface/transformers — can you scan that repo and flag anything that might conflict with our commercial product?"},{"title":"AI agent tool dependency screening","prompt":"Before my coding agent executes code from the openai/openai-python repo, can you check it for supply-chain vulnerabilities, suspicious dependencies, and confirm it's actively maintained?"}],"resultDescription":"Returns a structured report covering the repository's license type and associated risk level, supply-chain security findings (potentially vulnerable or malicious dependencies), maintenance velocity indicators (commit frequency, last activity), and community health signals such as star and fork counts.","failureModes":["Invalid or non-existent repository slug returns an error","Private repositories that are inaccessible return authorization failures","GitHub API rate limiting may cause transient failures","Repos with no license file may return unknown license risk","Very large monorepos may have incomplete dependency scans"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency, executing its code, or including it in a software supply chain. It is especially valuable for license compliance workflows, security-conscious CI/CD pipelines, and autonomous coding agents that need pre-execution risk assessment. Prefer it over generic GitHub API calls when you need a combined view of license risk, supply-chain security, and maintenance health in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:45:43.939Z","isFirstParty":false,"canonicalSlug":"alpha-stream-agentdiet-dev-github-repository-supply-chain-license-c7a8531d"}