{"uid":"cap_uDSs0Gv4_hT9fvGMBYWp7","slug":"arxiv-digest-agentdiet-dev-github-repository-security-license-risk-158bf27a","name":"GitHub Repository Security & License Risk Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://arxiv-digest.agentdiet.dev/v1/repo-risk-score)","url":"https://arxiv-digest.agentdiet.dev/v1/repo-risk-score?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_XfxZfwPmB8edF17-hkco_","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"arxiv-digest.agentdiet.dev","brandSlug":"arxiv-digest-agentdiet-dev-mpp","brandBaseUrl":"https://arxiv-digest.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, popularity signals, and supply-chain security before code execution or dependency adoption.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you run a full security and license audit on that GitHub repo so I know if there are any supply-chain risks or license issues I should worry about?","exampleUseCases":[{"title":"Pre-adoption dependency safety check","prompt":"I'm thinking of using huggingface/transformers in my production codebase — can you audit that GitHub repo and tell me about its license risk, how actively it's maintained, and whether there are any supply-chain security concerns?"},{"title":"AI agent coding guardrail before execution","prompt":"Before my coding agent pulls in any code from the openai/openai-python repo, run a repo risk score audit on it and flag anything suspicious about its licenses, dependencies, or maintenance health."},{"title":"Open source due diligence for compliance team","prompt":"Our legal team needs a risk report on the pallets/flask GitHub repo — specifically the license type, how many stars and forks it has, maintenance velocity, and any supply-chain red flags. Can you pull that?"}],"resultDescription":"Returns a structured risk assessment for the specified GitHub repository including license risk classification, maintenance velocity metrics (commit frequency, last activity), popularity signals (stars, forks), and supply-chain security indicators such as dependency vulnerability flags and suspicious package patterns.","failureModes":["Invalid or non-existent repository slug returns an error or empty result","Private repositories may be inaccessible without authentication","GitHub API rate limits could cause timeouts or partial data","Repositories with no release history may have incomplete maintenance velocity scores","Payment failure via x402 protocol prevents the call from completing"],"whenToPreferThis":"Choose this endpoint when you need a combined license compliance, maintenance health, and supply-chain security assessment for a GitHub repository in a single call — especially useful for coding agents performing pre-execution dependency vetting or compliance teams evaluating open source adoption risk. Prefer this over raw GitHub API calls when you need a pre-scored risk signal rather than raw metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:58.158Z","isFirstParty":false,"canonicalSlug":"arxiv-digest-agentdiet-dev-github-repository-security-license-risk-158bf27a"}