{"uid":"cap_tzMH9N-fx4J5_16T1QTQf","slug":"x402broker-dependency-audit-1a80b1d0","name":"x402broker Dependency Audit","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://x402broker.com/v1/dependency-audit)","url":"https://x402broker.com/v1/dependency-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"unknown","protocol":"x402","network":"base","amountUsd":null,"per":"call","confidence":"unknown"},{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_JNKF8D3KUjWuXgL7lzIQD","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null},{"uid":"pm_9KXZQtRu7RsCFEX7SWIAr","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security vulnerabilities before code execution.","exampleAgentPrompt":"Can you audit the GitHub repo github.com/expressjs/express for license risk, supply-chain security issues, and check how actively it's being maintained before I add it as a dependency?","exampleUseCases":[{"title":"Pre-integration dependency security check","prompt":"Before I add lodash to my project, can you audit the GitHub repo github.com/lodash/lodash for any license risks, supply-chain vulnerabilities, and tell me if it's still actively maintained?"},{"title":"Open source license compliance review","prompt":"I need to check if github.com/pallets/flask has any license restrictions that would prevent me from using it in a commercial product — can you run a license risk audit on it?"},{"title":"Evaluating an unfamiliar library's health","prompt":"I found this GitHub library at github.com/some-user/some-tool but I've never heard of it — can you check how many stars and forks it has, whether it's being maintained, and if there are any supply-chain security red flags?"}],"resultDescription":"Returns a structured report covering: license type and risk level, maintenance velocity (commit frequency, last activity), popularity signals (stars, forks), and supply-chain security assessment (known vulnerabilities, suspicious dependencies) for the queried GitHub repository.","failureModes":["Invalid or non-existent GitHub repository URL returns an error","Private repositories that are inaccessible return an access error","GitHub API rate limiting may cause intermittent failures","Repositories with no dependency files may return incomplete results","Payment failure via x402 protocol returns 402 error before audit runs"],"whenToPreferThis":"Choose this endpoint when you need a quick, automated pre-integration risk assessment of a GitHub repository — especially for license compliance, supply-chain security, and maintenance health signals. Prefer this over manual GitHub inspection when you need structured, machine-readable output for agent decision-making workflows, or when evaluating unfamiliar open-source dependencies at scale.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T12:47:20.811Z","isFirstParty":false,"canonicalSlug":"x402broker-dependency-audit-1a80b1d0"}