# GitHub Repository License & Supply-Chain Security Auditor

> GitHub Repository License & Supply-Chain Security Auditor is a paid API for AI agents from alpha-stream.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Scans a GitHub repository for license risk, dependency vulnerabilities, maintenance velocity, and supply-chain security posture before code adoption or execution.

## Facts

- Endpoint: GET https://alpha-stream.agentdiet.dev/v1/license-compliance-scan?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: alpha-stream.agentdiet.dev
- Website: https://alpha-stream.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/alpha-stream-agentdiet-dev-github-repository-license-supply-chain-2e8b1287
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_TxS85rnT8_fomXx0mUH1e

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability alpha-stream-agentdiet-dev-github-repository-license-supply-chain-2e8b1287
```

Example prompt: Before I add langchain-ai/langgraph to my project, can you audit it for license compatibility issues, dependency vulnerabilities, and check how actively maintained it is?

## When to prefer this

Choose this endpoint when an AI coding agent or developer needs a pre-adoption security and compliance gate for any GitHub repository — especially before executing, integrating, or depending on third-party open source code. Ideal for automating license compliance checks in CI/CD pipelines, vetting new dependencies, or flagging supply-chain risks before code review.

## Known failure modes

- Invalid or non-existent repository format returns an error (repo must be owner/name)
- Private repositories may not be accessible, returning a permissions or not-found error
- GitHub API rate limits may cause intermittent failures or incomplete data
- Repositories with no license file may return unknown license risk
- Payment failure (HTTP 402) if x402 micropayment is not completed

## How this service works

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://alpha-stream.agentdiet.dev/v1/license-compliance-scan)

## Output

Returns a structured report covering the repository's detected license type and associated legal risk level, dependency vulnerability findings, maintenance velocity indicators (commit frequency, last update), community signals (stars, forks, contributor count), and an overall supply-chain security assessment to inform safe adoption decisions.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "repo"
 ],
 "properties": {
  "repo": {
   "type": "string",
   "minLength": 1,
   "description": "GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/alpha-stream-agentdiet-dev-github-repository-license-supply-chain-2e8b1287/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from alpha-stream.agentdiet.dev](https://www.zero.xyz/host/alpha-stream.agentdiet.dev/llms.txt)