{"uid":"cap_itFYQxAMuNyLSPGfaZQ-j","slug":"whale-momentum-agentdiet-dev-github-repository-supply-chain-license-0f509684","name":"GitHub Repository Supply Chain & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://whale-momentum.agentdiet.dev/v1/repo-supply-chain-scan)","url":"https://whale-momentum.agentdiet.dev/v1/repo-supply-chain-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_s7sfVETzOx7WfxfQRrRs_","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"whale-momentum.agentdiet.dev","brandSlug":"whale-momentum-agentdiet-dev-mpp","brandBaseUrl":"https://whale-momentum.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, dependency vulnerabilities, maintenance velocity, and supply-chain security metrics before code integration or execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you run a full supply chain audit on that GitHub repo — check the license risk, how actively it's maintained, star/fork count, and any dependency vulnerabilities?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm about to use modelcontextprotocol/servers in my production app — can you audit that GitHub repo for license compatibility, known supply chain risks, and whether it's actively maintained?"},{"title":"Open source license compliance check","prompt":"Our legal team needs to know if the license on huggingface/transformers is safe for commercial use — can you scan that repo and flag any license risk?"},{"title":"Security review before AI agent code execution","prompt":"My coding agent is about to pull in openai/openai-python as a dependency — please do a full supply chain security scan on that GitHub repo before it runs any code."}],"resultDescription":"Returns a structured report covering license type and risk classification, dependency vulnerability findings, maintenance velocity indicators (commit frequency, last update), community health signals (stars, forks), and an overall supply-chain security assessment for the specified GitHub repository.","failureModes":["Invalid or non-existent repository slug returns an error — repo must be in owner/name format","Private or inaccessible repositories may return limited or no data","GitHub API rate limiting may affect completeness of results","Repos with no dependency manifest files may return incomplete vulnerability data","Malformed input (missing slash separator) will fail validation"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency — especially for license compatibility checks, supply-chain security audits, or maintenance health assessments. Prefer this over generic GitHub API calls when you need a consolidated risk report rather than raw repository metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:20:57.052Z","isFirstParty":false,"canonicalSlug":"whale-momentum-agentdiet-dev-github-repository-supply-chain-license-0f509684"}