# GitHub Repository Dependency & License Security Auditor

> GitHub Repository Dependency & License Security Auditor is a paid API for AI agents from preflight.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Audits a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before integrating or executing its code.

## Facts

- Endpoint: GET https://preflight.agentdiet.dev/v1/dependency-audit?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: preflight.agentdiet.dev
- Website: https://preflight.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/preflight-agentdiet-dev-github-repository-dependency-license-security-7db7d644
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_yOxjAMyMkUj12mkLx9z-Q

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability preflight-agentdiet-dev-github-repository-dependency-license-security-7db7d644
```

Example prompt: Before I add langchain-ai/langgraph to our project, can you audit it for license risks, how actively it's maintained, and any supply-chain security concerns?

## When to prefer this

Choose this endpoint when an AI coding agent needs to vet a GitHub repository before adding it as a dependency, when license compliance is required, or when supply-chain security posture must be checked programmatically. Prefer over manual GitHub browsing when automating dependency review workflows or when building agent pipelines that must validate open source libraries before code execution.

## Known failure modes

- Invalid repo format (not owner/name) returns a validation error
- Private or non-existent repository returns a not-found or access-denied error
- GitHub API rate limits may cause intermittent failures
- Repository with no license file may return incomplete license data
- Payment failure (402) if x402 USDC payment is not attached

## How this service works

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://preflight.agentdiet.dev/v1/dependency-audit)

## Output

Returns a structured audit report for the specified GitHub repository, including license type and risk level, maintenance velocity indicators, star and fork counts, and supply-chain security signals that help determine whether the repo is safe and appropriate to depend on.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "repo"
 ],
 "properties": {
  "repo": {
   "type": "string",
   "minLength": 1,
   "description": "GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/preflight-agentdiet-dev-github-repository-dependency-license-security-7db7d644/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from preflight.agentdiet.dev](https://www.zero.xyz/host/preflight.agentdiet.dev/llms.txt)