# GitHub Repository Security & License Auditor

> GitHub Repository Security & License Auditor is a paid API for AI agents from alpha-stream.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security (secret leaks, dependency vulnerabilities) before code execution.

## Facts

- Endpoint: GET https://alpha-stream.agentdiet.dev/v1/secret-leak-scan?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: alpha-stream.agentdiet.dev
- Website: https://alpha-stream.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/alpha-stream-agentdiet-dev-github-repository-security-license-auditor-813bc631
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_FJmN3kTVuv1WxmDYKUcxr

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability alpha-stream-agentdiet-dev-github-repository-security-license-auditor-813bc631
```

Example prompt: Can you audit the langchain-ai/langgraph GitHub repo for license risks, secret leaks, and supply-chain security issues before I start using it in my project?

## When to prefer this

Use this endpoint when an AI coding agent or developer needs to vet an open source GitHub repository for security, license compliance, and maintenance health before integrating it as a dependency or executing code from it. Prefer this over generic GitHub API calls when you need a consolidated supply-chain and license risk report in a single call.

## Known failure modes

- Invalid repo format (not owner/name) returns an error
- Private or non-existent repositories may return not found errors
- GitHub API rate limits may cause intermittent failures
- Repositories with no package manifests may have limited dependency analysis
- Payment failure via x402 results in HTTP 402 response blocking access

## How this service works

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://alpha-stream.agentdiet.dev/v1/secret-leak-scan)

## Output

Returns a structured security report for the specified GitHub repository, including license type and risk level, maintenance velocity indicators, star and fork counts, detected secret leaks, and supply-chain/dependency vulnerability findings.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "repo"
 ],
 "properties": {
  "repo": {
   "type": "string",
   "minLength": 1,
   "description": "GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/alpha-stream-agentdiet-dev-github-repository-security-license-auditor-813bc631/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from alpha-stream.agentdiet.dev](https://www.zero.xyz/host/alpha-stream.agentdiet.dev/llms.txt)