{"uid":"cap_ox3xh7rR2KSbZGFNOp2sQ","slug":"defi-yield-agentdiet-dev-github-repository-dependency-license-f065b8e9","name":"GitHub Repository Dependency & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://defi-yield.agentdiet.dev/v1/sbom-auditor)","url":"https://defi-yield.agentdiet.dev/v1/sbom-auditor?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_kHhpnxMIbJuDsf7-rmosg","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"defi-yield.agentdiet.dev","brandSlug":"defi-yield-agentdiet-dev-mpp","brandBaseUrl":"https://defi-yield.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits any GitHub repository for license risk, maintenance health, popularity signals, and supply-chain security vulnerabilities before integrating or executing code.","exampleAgentPrompt":"Before I add it as a dependency, can you audit the langchain-ai/langgraph GitHub repo for license risks, supply-chain security issues, and check how actively it's maintained?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm about to add huggingface/transformers to my project — can you audit that GitHub repo for any GPL or copyleft license issues, supply-chain vulnerabilities, and tell me if it's still actively maintained?"},{"title":"Open source library due diligence","prompt":"My team is evaluating openai/openai-python as a dependency — can you pull the license risk, maintenance velocity, star count, and any SBOM security flags for that repo?"},{"title":"Coding agent safe-execution check","prompt":"Before you execute any code from vercel/next.js, run a supply-chain security audit on that GitHub repo and flag any risky licenses or unmaintained packages I should know about."}],"resultDescription":"Returns a structured report covering license type and risk classification, repository maintenance velocity (commit frequency, last update), popularity signals (stars, forks, watchers), supply-chain security findings (dependency vulnerabilities, SBOM analysis), and an overall risk summary for the repository.","failureModes":["Invalid or non-existent repository (owner/name not found on GitHub) returns an error","Private repositories that are inaccessible return an authorization error","GitHub API rate limiting may degrade results or return partial data","Malformed repo input (not in owner/name format) triggers a validation error","Repositories with no dependency manifests may return limited SBOM data"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency, executing its code, or including it in a supply chain. It is especially valuable when license compliance, maintenance health, and supply-chain security all need to be assessed in a single call, rather than querying GitHub's API, OSV databases, and license scanners separately.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:32:55.881Z","isFirstParty":false,"canonicalSlug":"defi-yield-agentdiet-dev-github-repository-dependency-license-67b603a7"}