{"uid":"cap_ygGRBV-V1fFmA4dwq-X9a","slug":"hn-pulse-agentdiet-dev-github-repository-license-supply-chain-76ca8526","name":"GitHub Repository License & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://hn-pulse.agentdiet.dev/v1/license-compliance-scan)","url":"https://hn-pulse.agentdiet.dev/v1/license-compliance-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_QyB0XqzDHOerbedA2Qdal","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"hn-pulse.agentdiet.dev","brandSlug":"hn-pulse-agentdiet-dev-mpp","brandBaseUrl":"https://hn-pulse.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain/dependency security before code integration or execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you scan that GitHub repo and tell me if its license is commercially safe, whether it's actively maintained, and if there are any supply-chain security concerns?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm about to integrate modelcontextprotocol/servers into our product — can you audit that GitHub repo and tell me if the license allows commercial use, how actively it's maintained, and whether there are any known supply-chain risks?"},{"title":"Open-source license compliance check","prompt":"My legal team needs to know if the license on huggingface/transformers is compatible with our proprietary software — can you scan that repo and give me a license risk summary?"},{"title":"Evaluating a new OSS project for adoption","prompt":"We're considering switching to vercel/ai as our AI SDK — can you check its GitHub repo for maintenance velocity, community traction like stars and forks, and any security red flags in its dependencies?"}],"resultDescription":"Returns a structured report covering: license type and commercial-use risk level, maintenance velocity indicators (commit frequency, last update), repository popularity signals (stars, forks), and supply-chain/dependency security findings for the specified GitHub repository.","failureModes":["Invalid or non-existent repo format returns an error (e.g. missing owner/name structure)","Private or inaccessible GitHub repositories may return insufficient data or an access error","GitHub API rate limiting could cause incomplete results","Repos with no license file may return unknown license risk","Very new repositories may have limited maintenance velocity data"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adopting it as a dependency — specifically when license compliance, maintenance health, and supply-chain security all need to be checked in a single call. Prefer this over raw GitHub API calls when you need a pre-packaged risk assessment rather than raw metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:39:33.822Z","isFirstParty":false,"canonicalSlug":"hn-pulse-agentdiet-dev-github-repository-license-supply-chain-76ca8526"}