{"uid":"cap_jiJYyOhAhnKfsnh8L-1hS","slug":"whale-momentum-agentdiet-dev-github-repository-license-dependency-75193e6d","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://whale-momentum.agentdiet.dev/v1/license-compliance-scan)","url":"https://whale-momentum.agentdiet.dev/v1/license-compliance-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_bsObkel3mrUPwwEsS2tzP","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"whale-momentum.agentdiet.dev","brandSlug":"whale-momentum-agentdiet-dev-mpp","brandBaseUrl":"https://whale-momentum.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans a GitHub repository for license compliance risk, maintenance health, stars/forks activity, and supply-chain security vulnerabilities before code integration or execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph to our project, can you audit its GitHub repo for license risks, supply-chain vulnerabilities, and how actively it's being maintained?","exampleUseCases":[{"title":"Pre-integration open source vetting","prompt":"We're thinking about using huggingface/transformers in our commercial product — can you check its license compliance, maintenance activity, and any supply-chain security concerns before we commit?"},{"title":"Startup legal license due diligence","prompt":"Our legal team needs to know if any of our dependencies have GPL or AGPL licenses that could expose us — start by scanning vercel/next.js and tell me about its license risk."},{"title":"Security review before code execution","prompt":"I'm about to run code from the modelcontextprotocol/servers repo — can you first audit it for supply-chain vulnerabilities, suspicious dependencies, and check how well-maintained it is?"}],"resultDescription":"Returns a structured report covering the repository's detected license type and associated commercial risk level, maintenance velocity indicators (commit frequency, last commit date), community signals (stars, forks), and supply-chain security findings such as vulnerable or malicious dependencies.","failureModes":["Invalid or non-existent repository format returns an error (e.g. repo not found on GitHub)","Private repositories may not be accessible and will return an access error","Rate limiting from GitHub's API may cause transient failures","Repositories with no dependency manifests may return incomplete supply-chain data","Ambiguous or incomplete owner/name format (e.g. missing owner) will fail validation"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating its code or dependencies into a project — especially for license compliance checks in commercial settings, supply-chain security reviews prior to execution, or evaluating whether an open-source library is actively maintained. Prefer this over generic GitHub API calls when you need a consolidated risk report covering license, security, and maintenance in a single request.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:39.896Z","isFirstParty":false,"canonicalSlug":"whale-momentum-agentdiet-dev-github-repository-license-dependency-75193e6d"}