{"uid":"cap_qWIQbtsZoMk8dCcgyLKhg","slug":"serp-extract-agentdiet-dev-github-repo-dependency-license-security-f4732d7e","name":"GitHub Repo, Dependency & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/github-secops-auditor)","url":"https://serp-extract.agentdiet.dev/v1/github-secops-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"},"limit":{"type":"integer","default":20,"maximum":100,"minimum":1,"description":"Maximum number of items to return per page (1-100)"},"cursor":{"type":"string","description":"Opaque pagination cursor for fetching the next page"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_8xioJtsM2dsH2WAS88EZc","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits any GitHub repository for license risk, maintenance velocity, stars/forks, dependency vulnerabilities, and supply-chain security signals before integrating or executing code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risks, how actively it's maintained, and any supply-chain or vulnerability issues?","exampleUseCases":[{"title":"Pre-integration open source vetting","prompt":"I'm thinking of using modelcontextprotocol/servers in my project — can you check its license, how active the maintainers are, and whether there are any known supply-chain security issues?"},{"title":"Coding agent dependency safety check","prompt":"My coding agent just suggested using huggingface/transformers — audit that GitHub repo for CVEs, license risks, and maintenance velocity before I let it install the package."},{"title":"Enterprise OSS compliance review","prompt":"We need to know if apache/airflow has any GPL-style license risk or flagged vulnerabilities before we approve it for our internal stack — can you run a full security and license audit on it?"}],"resultDescription":"Returns a structured object containing license type and risk rating, repository maintenance velocity (commit frequency, last commit date), popularity metrics (stars, forks), dependency vulnerability findings, and supply-chain security signals — giving the agent a comprehensive pre-integration risk profile for the repository.","failureModes":["Invalid or non-existent repo slug returns an error (e.g. 'repo not found')","Private repositories that are inaccessible to the GitHub API return permission errors","Rate limiting from upstream GitHub API may cause transient failures","Repos with no detectable dependency manifest return partial results for dependency fields","Malformed owner/name format (missing slash or extra characters) causes validation error"],"whenToPreferThis":"Choose this endpoint when an AI coding agent needs to vet a GitHub repository before integrating, installing, or executing code from it — especially when license compliance, supply-chain security, or maintenance health are concerns. It is preferred over generic package scanners when you need a holistic view combining license risk, maintainer activity, popularity signals, and dependency vulnerabilities in a single call for any GitHub-hosted project.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:47.936Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-github-repo-dependency-license-security-f4732d7e"}