# GitHub Repository Security & License Auditor

> GitHub Repository Security & License Auditor is a paid API for AI agents from mesh.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code integration or execution.

## Facts

- Endpoint: GET https://mesh.agentdiet.dev/v1/code-security?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: mesh.agentdiet.dev
- Website: https://mesh.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/mesh-agentdiet-dev-github-repository-security-license-auditor-c1be738a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_jcORhDEDTdveqUmXE6rvc

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability mesh-agentdiet-dev-github-repository-security-license-auditor-c1be738a
```

Example prompt: Can you audit the GitHub repo langchain-ai/langgraph for license risk, how actively it's maintained, and any supply-chain security concerns before I add it as a dependency?

## When to prefer this

Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency, executing its code, or recommending it to users. It is particularly valuable for supply-chain security checks, open source license compliance, and assessing whether a project is actively maintained. Prefer it over generic GitHub API calls when you want a single summarized security and health snapshot rather than raw repository metadata.

## Known failure modes

- Invalid or non-existent repo format returns an error — repo must be in owner/name format
- Private or inaccessible repositories may return incomplete data or an access error
- GitHub API rate limiting may cause intermittent failures or degraded responses
- Repositories with no license file may return unknown license risk
- Payment not processed (402) if x402 credentials are missing or invalid

## How this service works

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://mesh.agentdiet.dev/v1/code-security)

## Output

Returns a structured security and health report for the specified GitHub repository, including license type and risk classification, maintenance velocity (commit frequency, last activity), star and fork counts as popularity signals, and supply-chain security findings such as vulnerable or suspicious dependencies.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "repo"
 ],
 "properties": {
  "repo": {
   "type": "string",
   "minLength": 1,
   "description": "GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/mesh-agentdiet-dev-github-repository-security-license-auditor-c1be738a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from mesh.agentdiet.dev](https://www.zero.xyz/host/mesh.agentdiet.dev/llms.txt)