{"uid":"cap_jNg1i8ekREzDJ74xN_-sJ","slug":"workflows-agentdiet-dev-github-repository-dependency-license-security-af821e57","name":"GitHub Repository Dependency & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://workflows.agentdiet.dev/v1/dependency-audit)","url":"https://workflows.agentdiet.dev/v1/dependency-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_A2TzDU_PSzP6mLhPZnx0e","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"workflows.agentdiet.dev","brandSlug":"workflows-agentdiet-dev-mpp","brandBaseUrl":"https://workflows.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution or dependency adoption.","exampleAgentPrompt":"Before I start using langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risk, supply-chain security issues, and check how actively it's maintained?","exampleUseCases":[{"title":"Pre-integration open-source library vetting","prompt":"I'm about to integrate modelcontextprotocol/servers into my project — can you audit that GitHub repo and tell me if there are any license issues, risky dependencies, or signs the project is abandoned?"},{"title":"Security review before coding agent tool use","prompt":"My coding agent wants to use huggingface/transformers — can you check that GitHub repo for supply-chain security flags, license risk, and overall maintenance health before it runs any code from there?"},{"title":"Competitive open-source project health comparison","prompt":"Can you evaluate the GitHub repo for tiangolo/fastapi — specifically its maintenance velocity, stars, forks, and whether there are any license or security concerns I should know about?"}],"resultDescription":"Returns a structured assessment of the GitHub repository including: license type and risk classification, maintenance velocity indicators (commit frequency, last activity), community metrics (stars, forks), and supply-chain security signals such as dependency vulnerability flags and suspicious patterns — enabling safe adoption decisions before code execution.","failureModes":["Invalid or non-existent repo slug returns an error or empty result","Private repositories may not be accessible without authentication","Rate limits on GitHub API may cause transient failures","Repositories with no dependency manifests may yield incomplete security data","Payment required error (HTTP 402) if x402 payment is not provided"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-flight security and health check on a GitHub repository before adopting it as a dependency, executing its code, or integrating it into a workflow. It is specifically suited for license compliance checks, supply-chain risk assessment, and maintenance velocity evaluation — all in one call — rather than querying GitHub directly or running separate vulnerability scanners.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:59.743Z","isFirstParty":false,"canonicalSlug":"workflows-agentdiet-dev-github-repository-dependency-license-security-af821e57"}