{"uid":"cap_xTNhHluPQYsnJ87qLSAKY","slug":"preflight-agentdiet-dev-github-repository-security-license-risk-auditor-925326e2","name":"GitHub Repository Security & License Risk Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://preflight.agentdiet.dev/v1/repo-risk-score)","url":"https://preflight.agentdiet.dev/v1/repo-risk-score?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_aQfMD3adJGutH3I_-_Krj","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"preflight.agentdiet.dev","brandSlug":"preflight-agentdiet-dev-mpp","brandBaseUrl":"https://preflight.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance health, popularity signals, and supply-chain security before integrating or executing its code","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risks, maintenance health, and any supply-chain security red flags?","exampleUseCases":[{"title":"Pre-integration dependency safety check","prompt":"I'm about to pull in modelcontextprotocol/servers as a dependency — can you run a full audit on that GitHub repo and tell me if there are any license issues, security risks, or signs the project is abandoned?"},{"title":"Open source license compliance review","prompt":"My company has a strict no-GPL policy — can you check the license risk score for huggingface/transformers before I recommend it to our team?"},{"title":"Supply-chain vetting for a coding agent","prompt":"Before my coding agent starts executing code from the vercel/next.js repo, audit it for supply-chain security risks, check how actively it's maintained, and give me its stars and forks numbers."}],"resultDescription":"Returns a structured risk assessment for the specified GitHub repository, including license risk classification, maintenance velocity metrics, star and fork counts as popularity signals, and supply-chain security findings — enabling agents or developers to make an informed go/no-go decision before integrating or executing code from the repo.","failureModes":["Invalid or non-existent repo slug returns an error response","Private repositories may return insufficient data or access errors","Rate limiting from GitHub's underlying API may cause delayed or failed responses","Repos with no license file may return uncertain license risk classification","Very new repos with no activity metrics may return sparse results"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-flight security and compliance check on a GitHub repository before adding it as a dependency, executing its code, or recommending it to a team. It is particularly valuable for enforcing open source license policies (e.g. blocking GPL in commercial projects), detecting abandoned or poorly maintained projects, and identifying supply-chain risks in the software dependency graph. Prefer this over manual GitHub inspection when automation, consistency, or cost-per-check economics ($0.01) matter.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:17.834Z","isFirstParty":false,"canonicalSlug":"preflight-agentdiet-dev-github-repository-security-license-risk-auditor-925326e2"}