# GitHub Repository Security & License Auditor

> GitHub Repository Security & License Auditor is a paid API for AI agents from whale-momentum.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution or dependency adoption.

## Facts

- Endpoint: GET https://whale-momentum.agentdiet.dev/v1/code-security?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: whale-momentum.agentdiet.dev
- Website: https://whale-momentum.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/whale-momentum-agentdiet-dev-github-repository-security-license-auditor-e6a7c6b2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_xiYniSvHR6yuSh4HrOZ5f

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability whale-momentum-agentdiet-dev-github-repository-security-license-auditor-e6a7c6b2
```

Example prompt: Can you audit the langchain-ai/langgraph GitHub repo and tell me about its license risk, how actively it's maintained, and whether there are any supply-chain security concerns before I add it as a dependency?

## When to prefer this

Use this endpoint when an AI agent or developer needs a pre-flight security and compliance check on a GitHub repository before adding it as a dependency, executing its code, or integrating it into a supply chain. It is especially valuable for automated coding agents that autonomously install packages and need to assess risk without human review. Prefer this over manual GitHub browsing when you need a structured, machine-readable risk summary covering license, maintenance, and security dimensions in a single call.

## Known failure modes

- Invalid or non-existent repository identifier returns an error — must use owner/name format
- Private repositories may not be accessible and will return an error
- GitHub API rate limits could cause temporary failures
- Repositories with no license file may have incomplete license risk data
- Payment failure (HTTP 402) if x402 micropayment is not properly handled

## How this service works

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://whale-momentum.agentdiet.dev/v1/code-security)

## Output

Returns a structured assessment of the GitHub repository including license type and risk level, maintenance velocity indicators, star and fork counts, supply-chain security evaluation, and dependency risk signals — giving agents and developers the information needed to decide whether to adopt or execute code from the repo.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "repo"
 ],
 "properties": {
  "repo": {
   "type": "string",
   "minLength": 1,
   "description": "GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/whale-momentum-agentdiet-dev-github-repository-security-license-auditor-e6a7c6b2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from whale-momentum.agentdiet.dev](https://www.zero.xyz/host/whale-momentum.agentdiet.dev/llms.txt)