{"uid":"cap_jJ7oELArOHOF1e--XsoS2","slug":"arxiv-digest-agentdiet-dev-github-repository-security-license-auditor-93f924bb","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://arxiv-digest.agentdiet.dev/v1/github)","url":"https://arxiv-digest.agentdiet.dev/v1/github?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_I9I8YJabHQYhLKEHKicU5","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"arxiv-digest.agentdiet.dev","brandSlug":"arxiv-digest-agentdiet-dev-mpp","brandBaseUrl":"https://arxiv-digest.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Analyzes a GitHub repository for license risk, maintenance velocity, popularity metrics (stars/forks), and supply-chain security before code integration.","exampleAgentPrompt":"Before I integrate it into my project, can you audit the langchain-ai/langgraph GitHub repo for license risk, how actively it's maintained, and any supply-chain security concerns?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm thinking of using huggingface/transformers as a dependency — can you check its license, how actively it's maintained, and whether there are any supply-chain security red flags before I add it to my codebase?"},{"title":"Open source license compliance check","prompt":"Our legal team needs to know if the license on facebookresearch/llama is safe for commercial use — can you audit the microsoft/autogen GitHub repo for license risk and flag anything that could be a problem?"},{"title":"Abandoned repo risk assessment","prompt":"Can you check whether denoland/deno is still actively maintained — I want to see the maintenance velocity, stars, forks, and whether the supply chain looks healthy before my team builds on it?"}],"resultDescription":"Returns a structured report on the target GitHub repository covering license type and risk level, maintenance velocity (commit frequency, recency), popularity signals (stars, forks), and supply-chain security indicators such as dependency vulnerabilities or suspicious patterns.","failureModes":["Invalid repo format (not owner/name) returns an error or empty result","Private or non-existent repositories cannot be accessed and will return an error","GitHub API rate limits may cause transient failures","Payment failure via x402 will block the request","Sparse or very new repos may have insufficient data for a complete audit"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-flight security and compliance check on a GitHub repository before adopting it as a dependency or executing its code. It is especially useful for license risk detection and supply-chain security assessment, which most generic GitHub metadata APIs do not provide. Prefer it over raw GitHub API calls when you need a synthesized risk verdict rather than raw statistics.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:49:57.147Z","isFirstParty":false,"canonicalSlug":"arxiv-digest-agentdiet-dev-github-repository-security-license-auditor-93f924bb"}