{"uid":"cap_sKiz2XK3JaXN7K2FmYLJs","slug":"mcp-security-agentdiet-dev-github-repository-dependency-license-e0997e77","name":"GitHub Repository Dependency & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://mcp-security.agentdiet.dev/v1/dependency-audit)","url":"https://mcp-security.agentdiet.dev/v1/dependency-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_fv-GcPQvjTBaOBv3TWzxA","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"mcp-security.agentdiet.dev","brandSlug":"mcp-security-agentdiet-dev-mpp","brandBaseUrl":"https://mcp-security.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance health, popularity signals, and supply-chain security vulnerabilities before code integration or execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit its GitHub repo for license risks, how actively it's maintained, and any supply-chain security issues?","exampleUseCases":[{"title":"Pre-integration dependency license check","prompt":"I want to use modelcontextprotocol/servers in my commercial product — can you check its GitHub repo to see what license it uses and whether there are any copyleft or compliance risks?"},{"title":"Abandoned project maintenance check","prompt":"Can you audit the GitHub repo huggingface/transformers to see how actively it's maintained — things like recent commits, stars, forks, and maintenance velocity?"},{"title":"Supply-chain security scan before code execution","prompt":"Before I run any code from openai/openai-python, audit its GitHub repository for supply-chain security issues and any suspicious dependency flags."}],"resultDescription":"Returns a structured report covering: license type and associated legal/compliance risk, maintenance velocity metrics (commit frequency, last activity), popularity signals (stars, forks), and supply-chain security findings including dependency vulnerability flags — giving the agent a complete risk profile for the repository before integration or execution.","failureModes":["Invalid or non-existent repository format (owner/name) returns an error or empty result","Private repositories that are not publicly accessible cannot be audited","GitHub API rate limiting may cause timeouts or incomplete results","Repos with no dependency manifest files may return limited supply-chain data","Payment failure (402) if x402 micropayment is not properly negotiated"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-flight security and compliance check on a GitHub repository before adding it as a dependency, running its code, or recommending it to users. It is especially valuable for supply-chain risk assessment, open source license compliance review, and evaluating whether a project is actively maintained — all in a single call. Prefer it over generic GitHub API calls when you need an opinionated, security-focused summary rather than raw repository metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:16.707Z","isFirstParty":false,"canonicalSlug":"mcp-security-agentdiet-dev-github-repository-dependency-license-e0997e77"}