All projects on Base matching “github”

New vulnerabilities in one place: CISA Known Exploited Vulnerabilities from the last 14 days (due dates, ransomware use), CVEs published in the last 24 hours (CVSS, severity, CWE, vendor/product), and reviewed GitHub advisories (ecosystem, package, vulnerable and patched versions). Rebuilt every hour. $0.01 per call, no account. Free 24h-delayed sample: GET https://ioswarm.io/api/v1/feeds/security

One call, many sources: search Hacker News, GitHub, Stack Overflow, and Wikipedia by keyword and get back a unified, ranked result set — titles, URLs, scores/stars, and snippets — across all of them at once. The general research/search read agents make to ground answers, find code, surface discussion, and gather context. No API keys, no per-source accounts, free upstreams. Pass `sources` to narrow

PyPI breaking changes between two versions of a Python package, before a pip package upgrade: the documented breaking changes per version from the project's CHANGELOG, HISTORY or CHANGES file and GitHub release notes (alpha/beta/rc folded into the major), plus Requires-Python and required dependency changes, yanked versions, migration guide links and a verdict. PEP 440 versions ('1.10.13', '2.0')

Lint a GitHub Actions workflow: actions not pinned to a commit SHA, missing or write-all permissions, pull_request_target with PR head checkout, script injection via event fields in run, secrets on the command line, curl|bash, self-hosted runners, deprecated set-output.

Submit an x402 Verified seller record without GitHub: validated by the x402-verified CI validator, PR opened and merged on green for you. One-time fee.

Render GitHub-Flavored Markdown to HTML. Output is sanitized by default (scripts, event handlers and javascript: URLs removed); set sanitize=false to keep raw HTML.

Send a link, know it: any URL — article, YouTube video, X post, podcast episode, paper, PDF, GitHub repo — becomes a durable, cited knowledge page plus a token-efficient markdown packet built for agent relay. Flat $0.01 per link. Links are unique: anything any agent has ever known answers instantly from the shared knowledge base; first-ever links are processed once, for everyone (we absorb transcr

Latest health score for one protocol: components (GitHub activity, TVL trend, treasury), source details, and score history.

Daily Sato Score history for one Sato Hub listing: score, tier components, GitHub stars, status and verification state per day, with the dates the score moved (genuine changes vs our own method revisions marked). Captured daily since 2026-06-12; not reconstructable. The current catalog and the daily score line stay free. Priced per daily point returned: $0.005 for up to 90 days, +$0.001 per day be

Advanced startup name check: domains across 13 TLDs, GitHub, npm, PyPI, X, YouTube and Instagram handles, available .com name variants, notable Wikidata name collisions, plus ready-to-call links for App Store, Google search and EU trademark checks.

Compute a keyed HMAC of some data with a secret key — the standard way to sign and verify webhooks (Stripe, GitHub, etc.) and API requests. Data and key may each be utf8/hex/base64/base64url; the tag is returned as hex/base64/base64url.

Audit a public GitHub bounty issue for stale status, competing pull requests, claimant signals, and solver saturation.

Check an npm package, PyPI package, or GitHub repo and return a DepScout install verdict.

Pre-install scan of an npm or PyPI package, GitHub repo, raw URL, ClawHub skill, MCP server or tool list, or inline content. Matches OSV and OpenSSF malicious-package advisories, then behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection, install-time droppers and MCP tool poisoning. Returns a verdict, file-and-line evidence, a SHA-256 of the input and an Ed25519-si

Paid MCP endpoint — POST a JSON-RPC tools/call. Tools: get_content / refresh_content (public profile data: github, twitter, linkedin) and the rep_* wallet-reputation tools (rep_rank, rep_rank_batch, rep_achievements, rep_persona_match, rep_profile_report). Flat USD prices per call, quoted in the 402.

Static malware and prompt-injection scan of an OpenClaw / AgentSkills bundle before install. Detects credential and wallet theft, exfiltration endpoints, remote code execution, reverse shells, obfuscated payloads, persistence, cryptominers, and injection in SKILL.md. Returns PASS/REVIEW/BLOCK with risk score and per-finding file, line and evidence. bundle = {files:[{path,content}]} or {github:'own

Crypto news feed, $0.0008 USDC per call: deduplicated headlines from 37 public sources (CoinDesk, Cointelegraph, The Block, Decrypt, DL News, Blockworks, Ethereum/Solana/Base blogs, Uniswap/Aave/Arbitrum/Optimism forums, GitHub releases of geth, reth, agave, Bitcoin Core). Each item: title, source url, source, published_at, topics, tickers, summary. Filters: topics, tickers, q, type. since cursor

GitHub Trending repositories as clean JSON (name, stars, forks, description, language).

4-Protocol MCP Glama 5.0/5.0 TDQS, A2A Card & x402/MPP Schema Compiler (/v1/mcp-compiler) — Audits any live MCP server URL or GitHub repo on Glama's 6-dimension TDQS rubric and compiles drop-in 5.0/5.0 schemas, A2A Agent Cards, and x402/MPP configs.

4-Protocol MCP Glama 5.0/5.0 TDQS, A2A Card & x402/MPP Schema Compiler (/v1/mcp-compiler) — Audits any live MCP server URL or GitHub repo on Glama's 6-dimension TDQS rubric and compiles drop-in 5.0/5.0 schemas, A2A Agent Cards, and x402/MPP configs. (https://mcp-compiler.agentdiet.dev/v1/mcp-compiler)

Mint 0.001 USDC worth of tokens for GitHub

Check whether a public GitHub issue bounty is still actionable using live issue, maintainer, pull request, and repository evidence.

Canonical GitHub bounty viability check for agents: issue state, repo trust, payout evidence, age, claims and competing PRs. Prevents wasted coding on stale or fake rewards.

Bounty legitimacy check for a GitHub repo or issue: merge speed, payout signals, trap and pile-up red flags, and a verdict (likely_pays / unproven / avoid). Deterministic, public-data evidence.

Top trending GitHub repositories as JSON (name, url, stars, language, today_stars)

AgentDiet 4-Node Autonomous B2B & SEC Due Diligence DAG: Executes Company-Enrich, Domain-OSINT, SEC-Intel, and GitHub-Audit in one atomic call.

Pre-flight due diligence for GitHub bounty issues. Detect competing PRs, stale issues, maintainer inactivity, saturation and payout-risk signals before an autonomous coding agent spends compute on implementation.

Check an x402 endpoint BEFORE paying it. Makes one unpaid request (never sends money), decodes the 402 terms, and verifies: the asset is a real USD stablecoin on that network, the price in USD vs your max_price_usd cap (default $0.50), payTo is a sane address (and matches expected_pay_to if given), HTTPS and certificate validity, redirects, and domain age. Returns safe_to_pay, a risk level, findin

Structured crypto market signal: for each CoinGecko id return price, market cap, 24h change, 24h volume, plus a derived momentum score (-100..100), a bullish/neutral/bearish signal, and a volatility flag — enriched data an agent ingests in a trading/research loop without computing it itself. Input: ids (comma-separated).

Live on-chain ERC-20 token balanceOf and decimals on Base Mainnet (defaults to Base USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913).