{"uid":"cap_iCae-pG0-YvOiqlYNbMdT","slug":"email-verify-agentdiet-dev-github-repository-security-license-auditor-8f99421d","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://email-verify.agentdiet.dev/v1/sbom-auditor)","url":"https://email-verify.agentdiet.dev/v1/sbom-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_i8uZskDjLujlM3SU8W1J_","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"email-verify.agentdiet.dev","brandSlug":"email-verify-agentdiet-dev-mpp","brandBaseUrl":"https://email-verify.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits any GitHub repository for license risk, dependency vulnerabilities, maintenance health, and supply-chain security signals before code integration.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risks, supply-chain security issues, and whether it's actively maintained?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm about to add modelcontextprotocol/servers to our project — can you audit that GitHub repo and tell me if the license is safe, if it has any supply-chain risks, and how actively it's maintained?"},{"title":"Open source license compliance check","prompt":"Our legal team needs to know if the license on huggingface/transformers is compatible with our commercial product — can you pull a license risk assessment for that GitHub repo?"},{"title":"Security review before code execution","prompt":"I want to run some code from the denoland/deno GitHub repo in our CI pipeline — can you first check it for supply-chain security issues, dependency vulnerabilities, and maintenance health?"}],"resultDescription":"Returns a structured report covering the repository's license type and associated risk level, maintenance velocity (commit frequency, last update), popularity signals (stars, forks), dependency inventory, and supply-chain security flags — helping the agent decide whether the repo is safe and suitable for integration or code execution.","failureModes":["Invalid or non-existent repository name returns an error (must be in owner/name format)","Private repositories may not be accessible without authentication","Rate limiting from GitHub API may cause timeouts or partial results","Repos with no license file may return unknown license risk","Very new or very small repos may have limited signal for maintenance velocity assessment"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to vet a GitHub repository before importing it as a dependency, executing its code, or integrating it into a project. It is especially valuable for supply-chain security due diligence, license compliance checks, and evaluating whether a repo is actively maintained. Prefer this over manual GitHub browsing or generic search when you need structured, machine-readable security signals at $0.01 per call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:44:46.899Z","isFirstParty":false,"canonicalSlug":"email-verify-agentdiet-dev-github-repository-security-license-auditor-a04b7af1"}