{"uid":"cap_yqspnskiHY1Eqosi3JEHx","slug":"workflows-agentdiet-dev-github-repository-license-dependency-supply-29f1d6d6","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://workflows.agentdiet.dev/v1/sbom-auditor)","url":"https://workflows.agentdiet.dev/v1/sbom-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_HTiciekDBYiY5VdvkbXij","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"workflows.agentdiet.dev","brandSlug":"workflows-agentdiet-dev-mpp","brandBaseUrl":"https://workflows.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance health (stars/forks/velocity), and supply-chain security before integrating or executing its code","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit it for license risks, supply-chain security issues, and check how actively it's maintained?","exampleUseCases":[{"title":"Pre-integration open source vetting","prompt":"I'm about to use modelcontextprotocol/servers in my project — can you check its license, see if there are any supply-chain red flags, and tell me how healthy the maintenance looks?"},{"title":"Security review before code execution","prompt":"I found a useful tool at huggingface/transformers but before I run any of its code, can you audit the repo for supply-chain security risks and flag any concerning dependencies?"},{"title":"Evaluating a competitor's open source stack","prompt":"Can you pull the security and maintenance health report for openai/openai-python — I want to see its license type, star/fork counts, and whether there are any known supply-chain vulnerabilities?"}],"resultDescription":"Returns a structured report covering the repository's detected license type and associated legal risk, maintenance velocity indicators (stars, forks, recent commit activity), and supply-chain security findings including dependency risks and any flagged vulnerabilities — giving an agent a comprehensive risk picture before integrating or executing code from the repo.","failureModes":["Invalid or nonexistent owner/name format returns an error (e.g. repo not found on GitHub)","Private repositories that are inaccessible may return empty or partial results","GitHub API rate limits may cause transient failures or incomplete data","Repos with no dependency manifest may have incomplete supply-chain analysis","Payment not completed via x402 protocol results in HTTP 402 and no data returned"],"whenToPreferThis":"Choose this endpoint when an AI agent or developer needs a comprehensive pre-integration security check on a GitHub repository — covering license compliance, maintenance health, and supply-chain security — in a single call. Prefer this over a generic CVE scanner when you need repository-level metadata (stars, forks, license) combined with dependency risk in one response. Prefer over a raw GitHub API call when you need opinionated risk scoring rather than raw metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:49.110Z","isFirstParty":false,"canonicalSlug":"workflows-agentdiet-dev-github-repository-license-dependency-supply-e4552062"}