{"uid":"cap_nduzcnAMaaODQ5mrbiUFG","slug":"onchain-risk-agentdiet-dev-github-repository-security-license-risk-99868d3c","name":"GitHub Repository Security & License Risk Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://onchain-risk.agentdiet.dev/v1/repo-risk-score)","url":"https://onchain-risk.agentdiet.dev/v1/repo-risk-score?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_E6Y4BIuFqjp4aAHzCuN4t","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"onchain-risk.agentdiet.dev","brandSlug":"onchain-risk-agentdiet-dev-mpp","brandBaseUrl":"https://onchain-risk.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution or dependency adoption.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit it for license risks, check how actively it's maintained, and flag any supply-chain security concerns?","exampleUseCases":[{"title":"Pre-integration dependency risk check","prompt":"I'm about to use modelcontextprotocol/servers in my production app — can you audit it for license issues, check its maintenance velocity, and tell me if there are any supply-chain red flags I should know about?"},{"title":"Open source project due diligence","prompt":"We're evaluating huggingface/transformers for enterprise adoption — can you check its license risk, how many stars and forks it has, and whether it has any known supply-chain security issues?"},{"title":"Security review before code execution","prompt":"Before my coding agent runs anything from this repo, audit openai/openai-python for license restrictions, maintenance health, and supply-chain vulnerabilities so I know it's safe to use."}],"resultDescription":"Returns a structured risk score object covering license risk level, maintenance velocity metrics, GitHub stars and forks counts, and supply-chain security signals for the specified repository — helping agents and developers decide whether to trust or adopt the dependency.","failureModes":["Invalid repo format (not owner/name) returns a validation error","Private or non-existent repositories may return a not-found error or empty result","GitHub API rate limits may occasionally cause delayed or failed responses","Repos with no license file may return unknown license risk","Payment not provided or rejected via x402 returns HTTP 402"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adding it as a dependency, executing its code, or adopting it in a project — especially when license compliance, supply-chain security, and maintenance health are all needed in a single scored response. Prefer this over manual GitHub browsing or generic search when you need a structured, machine-readable risk assessment with a single API call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:07.233Z","isFirstParty":false,"canonicalSlug":"onchain-risk-agentdiet-dev-github-repository-security-license-risk-99868d3c"}