{"uid":"cap_ouZnoy89OoZ9y0PTSs7We","slug":"workflows-agentdiet-dev-github-repository-license-dependency-supply-67268dfc","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://workflows.agentdiet.dev/v1/license-compliance-scan)","url":"https://workflows.agentdiet.dev/v1/license-compliance-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Gu68KHPE07Azp5nDWBFQq","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"workflows.agentdiet.dev","brandSlug":"workflows-agentdiet-dev-mpp","brandBaseUrl":"https://workflows.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance health, and supply-chain security by analyzing stars/forks, maintenance velocity, and dependency vulnerabilities.","exampleAgentPrompt":"Before I add langchain-ai/langgraph to our project, can you audit that GitHub repo for license risks, maintenance health, and any supply-chain security concerns?","exampleUseCases":[{"title":"License check before commercial use","prompt":"I want to use the repo huggingface/transformers in our commercial SaaS product — can you audit it to make sure the license won't cause legal issues and check if the project is actively maintained?"},{"title":"Pre-integration security vetting","prompt":"We're about to import facebook/react as a dependency — can you scan that GitHub repo for supply-chain security risks, flag any problematic licenses, and tell me how healthy the project looks based on stars, forks, and commit activity?"},{"title":"AI agent dependency risk assessment","prompt":"I'm building an AI agent that uses modelcontextprotocol/servers — can you audit that GitHub repository for license compliance, maintenance velocity, and any security red flags in its dependencies before I deploy?"}],"resultDescription":"Returns a structured report for the specified GitHub repository including: license type and risk classification, maintenance velocity indicators (commit activity, last update), popularity signals (stars, forks), supply-chain security findings (dependency vulnerabilities, suspicious patterns), and an overall risk assessment suitable for pre-integration decision-making.","failureModes":["Invalid or non-existent repository format returns an error","Private repositories that are inaccessible to the scanner return an access error","GitHub API rate limiting may cause intermittent failures","Repositories with no license file may return incomplete license data","Very new repositories with minimal history may yield limited maintenance velocity data"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive pre-integration audit of a GitHub repository covering license compliance, maintenance health, and supply-chain security in a single call. Prefer it over a generic CVE scanner when you need the broader picture including license risk and repo health metrics, or over manual GitHub inspection when you need a structured, machine-readable risk report suitable for automated decision-making in CI/CD pipelines or agent workflows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:47.933Z","isFirstParty":false,"canonicalSlug":"workflows-agentdiet-dev-github-repository-license-dependency-supply-e4552062"}