{"uid":"cap_w_ghfjuJdOh7jUxHZeKZ5","slug":"llms-generator-agentdiet-dev-github-repository-license-dependency-dbfba51a","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://llms-generator.agentdiet.dev/v1/license-compliance-scan)","url":"https://llms-generator.agentdiet.dev/v1/license-compliance-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_78lDDP3GCtx_KzyNw2MZ6","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"llms-generator.agentdiet.dev","brandSlug":"llms-generator-agentdiet-dev-mpp","brandBaseUrl":"https://llms-generator.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance health, popularity signals, and supply-chain security vulnerabilities before integrating its code.","exampleAgentPrompt":"Can you audit the langchain-ai/langgraph GitHub repo and tell me about its license risk, how actively maintained it is, and whether there are any supply-chain security concerns before I add it as a dependency?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"Before I add modelcontextprotocol/servers as a dependency in my project, can you scan it for license compatibility, maintenance activity, and any supply-chain security red flags?"},{"title":"Commercial software license clearance","prompt":"I need to know if the huggingface/transformers GitHub repo uses a license that's safe for commercial use — can you audit it and flag any license risks?"},{"title":"Open source vendor due diligence","prompt":"We're evaluating openai/openai-python as a core library for our platform. Can you assess its maintenance velocity, community health metrics, and security posture from its GitHub repo?"}],"resultDescription":"Returns a structured report covering the repository's detected license type and risk classification, maintenance velocity indicators (commit frequency, last activity), popularity signals (stars, forks), and supply-chain security findings such as dependency vulnerabilities or suspicious patterns — enabling go/no-go decisions before code integration.","failureModes":["Invalid or non-existent repository format returns an error (repo must be in owner/name format)","Private or inaccessible repositories may fail due to GitHub API access restrictions","GitHub API rate limiting may cause transient failures or incomplete results","Repositories with no license file may return uncertain license risk classification","Supply-chain data may be incomplete for very new or obscure repositories"],"whenToPreferThis":"Choose this endpoint when you need a pre-integration security and compliance check on a specific GitHub repository — particularly when evaluating open source dependencies for license compatibility (GPL vs MIT vs Apache), assessing whether a project is actively maintained, or screening for supply-chain security risks. Prefer it over manual GitHub browsing when you need a structured, agent-consumable risk report rather than raw repository metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:39.022Z","isFirstParty":false,"canonicalSlug":"llms-generator-agentdiet-dev-github-repository-license-dependency-c09faf11"}