# GitHub Repository Security & License Auditor

> GitHub Repository Security & License Auditor is a paid API for AI agents from serp-extract.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-23).

Audits a GitHub repository for license risk, maintenance velocity, stars/forks activity, and supply-chain security signals before code integration or execution.

## Facts

- Endpoint: POST https://serp-extract.agentdiet.dev/v1/code-security?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-23
- Activations on Zero: 0
- Provider: serp-extract.agentdiet.dev
- Website: https://serp-extract.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/serp-extract-agentdiet-dev-github-repository-security-license-auditor-3c94d0f3
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_NjFCN03M6zqAHQeM-mHws

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability serp-extract-agentdiet-dev-github-repository-security-license-auditor-3c94d0f3 -d '<json body>'
```

Example prompt: Before I add langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risk, how actively it's maintained, and any supply-chain security concerns?

## When to prefer this

Choose this endpoint when you need a holistic pre-integration audit of a GitHub repository combining license compliance, maintenance health, popularity signals, and supply-chain security in a single call — rather than querying GitHub's API directly or using separate tools for each dimension. Particularly valuable for AI coding agents that need to vet dependencies before recommending or executing code that uses them.

## Known failure modes

- Invalid or non-existent repository (owner/name not found on GitHub) returns an error
- Private repositories that are inaccessible return an authorization error
- GitHub API rate limiting may cause transient failures
- Malformed repo identifier (not in owner/name format) triggers validation error
- Network timeouts if GitHub API is slow or unavailable

## How this service works

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/code-security)

## Output

Returns a structured report covering the repository's license type and associated risk level, maintenance velocity indicators (commit frequency, last update), popularity metrics (stars, forks), and supply-chain security signals such as dependency vulnerabilities or suspicious patterns.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "repo"
 ],
 "properties": {
  "repo": {
   "type": "string",
   "minLength": 1,
   "description": "GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/serp-extract-agentdiet-dev-github-repository-security-license-auditor-3c94d0f3/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from serp-extract.agentdiet.dev](https://www.zero.xyz/host/serp-extract.agentdiet.dev/llms.txt)