{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-07-20T14:37:29.537Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-07-20T14:36:19.763Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":30,"completeTreeCount":29,"incompleteTreeCount":1,"lockfileRepositoryCount":17,"sbomRepositoryCount":4,"artifactRepositoryCount":20,"resolvedRepositoryCount":29,"resolvedArtifactRepositoryCount":20,"dependencyFileCount":33,"parsedFileCount":32,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4205,"metadataResolvedCount":4191,"metadataNotFoundCount":14,"osvEvaluatedVersionCount":4205,"codeRadarRepositoryCount":30},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":5000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":30,"packageCount":2831,"aiPackageCount":41,"resolvedComponentCount":7181,"resolvedVersionCount":4205,"providerExposureRepositoryCount":7,"licenseExpressionCount":57,"knownLicensePackageCount":2796,"unknownLicensePackageCount":35,"advisoryCount":572,"matchedAdvisoryRepositoryCount":25,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":18,"repositoryShare":0.6}},"kind":"paket","entity":{"id":"package:pypi:fonttools","slug":"fonttools-d2488ea8","identity":"pypi:fonttools","ecosystem":"pypi","name":"fonttools","label":"fonttools","category":null,"aiRelevant":false,"provider":null,"repositoryCount":8,"occurrenceCount":9,"directRepositoryCount":0,"versionCount":7,"licenseExpressions":["MIT"],"advisoryIds":["GHSA-768j-98cg-p3fv"],"advisoryCount":1,"verifiedAttestation":true,"repositories":[{"id":"opencode:5142","slug":"opencode-5142","name":"strahlenexposition","pathWithNamespace":"uba-ki-lab/strahlenexposition","versions":["4.57.0"],"evidenceCount":2},{"id":"opencode:6174","slug":"opencode-6174","name":"Energieautarkes Wohnquartier - Backend","pathWithNamespace":"energieautarkes-wohnquartier/backend","versions":["4.58.0"],"evidenceCount":1},{"id":"opencode:10162","slug":"opencode-10162","name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","versions":["4.62.1"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["4.58.5"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["4.59.2"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["4.55.3"],"evidenceCount":1},{"id":"opencode:5201","slug":"opencode-5201","name":"photovoltaic_systems","pathWithNamespace":"uba-ki-lab/photovoltaic_systems","versions":["4.58.0"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["4.61.1"],"evidenceCount":1}],"versions":[{"version":"4.55.3","repositoryCount":1,"occurrenceCount":1,"ageDays":586,"advisoryIds":["GHSA-768j-98cg-p3fv"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2024-12-10T21:39:22Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-768j-98cg-p3fv","PYSEC-2026-1389"],"links":[],"relatedProjects":[{"id":"github.com/fonttools/fonttools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"4.57.0","repositoryCount":1,"occurrenceCount":2,"ageDays":473,"advisoryIds":["GHSA-768j-98cg-p3fv"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-04-03T11:07:11Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-768j-98cg-p3fv","PYSEC-2026-1389"],"links":[],"relatedProjects":[{"id":"github.com/fonttools/fonttools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"4.58.0","repositoryCount":2,"occurrenceCount":2,"ageDays":435,"advisoryIds":["GHSA-768j-98cg-p3fv"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-05-10T17:36:33Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-768j-98cg-p3fv","PYSEC-2026-1389"],"links":[],"relatedProjects":[{"id":"github.com/fonttools/fonttools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"4.58.5","repositoryCount":1,"occurrenceCount":1,"ageDays":382,"advisoryIds":["GHSA-768j-98cg-p3fv"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-07-03T14:04:45Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-768j-98cg-p3fv","PYSEC-2026-1389"],"links":[],"relatedProjects":[{"id":"github.com/fonttools/fonttools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"4.59.2","repositoryCount":1,"occurrenceCount":1,"ageDays":326,"advisoryIds":["GHSA-768j-98cg-p3fv"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-08-27T16:39:42Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-768j-98cg-p3fv","PYSEC-2026-1389"],"links":[],"relatedProjects":[{"id":"github.com/fonttools/fonttools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"4.61.1","repositoryCount":1,"occurrenceCount":1,"ageDays":219,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-12-12T17:30:47Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"ATTESTATION","url":"https://pypi.org/integrity/fonttools/4.61.1/fonttools-4.61.1-cp314-cp314-manylinux1_x86_64.manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_5_x86_64.whl/provenance"}],"relatedProjects":[{"id":"github.com/fonttools/fonttools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/fonttools/fonttools","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/fonttools/4.61.1/fonttools-4.61.1-cp314-cp314-manylinux1_x86_64.manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_5_x86_64.whl/provenance","verified":true,"sourceRepository":"https://github.com/fonttools/fonttools","commit":"0a6517921cb779fef919a5e2cbc1a01e77375ced"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"4.62.1","repositoryCount":1,"occurrenceCount":1,"ageDays":129,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-03-13T13:53:45Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"ATTESTATION","url":"https://pypi.org/integrity/fonttools/4.62.1/fonttools-4.62.1-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl/provenance"}],"relatedProjects":[{"id":"github.com/fonttools/fonttools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/fonttools/fonttools","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/fonttools/4.62.1/fonttools-4.62.1-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl/provenance","verified":true,"sourceRepository":"https://github.com/fonttools/fonttools","commit":"da54a2924009c9a6497dad23f4a6be4a96a8b0e7"}],"verifiedAttestation":true,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:9d0ed4590d410bd37aeab076","repositoryId":"opencode:6174","repositorySlug":"opencode-6174","repositoryName":"Energieautarkes Wohnquartier - Backend","repositoryPathWithNamespace":"energieautarkes-wohnquartier/backend","ecosystem":"pypi","name":"fonttools","identity":"pypi:fonttools","version":"4.58.0","versionKey":"pypi:fonttools@4.58.0","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"dc5008ef9fba69d70ea9e7b3fea21265fa5ef93d","sourceUrl":"https://gitlab.opencode.de/energieautarkes-wohnquartier/backend/-/blob/fc7e24cd546449ac9fdee4ad78aab861e0c89666/poetry.lock","commitSha":"fc7e24cd546449ac9fdee4ad78aab861e0c89666"},{"id":"component:8267e405449b7802188ad126","repositoryId":"opencode:5530","repositorySlug":"opencode-5530","repositoryName":"GSA Extraction","repositoryPathWithNamespace":"uba-ki-lab/gsa-extraction","ecosystem":"pypi","name":"fonttools","identity":"pypi:fonttools","version":"4.58.5","versionKey":"pypi:fonttools@4.58.5","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"fbb23733e647554b5678500b3f17f13bac7f77f5","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/gsa-extraction/-/blob/f5161e79d3f8c53877f9b1b0d72e1c10bff775ba/uv.lock","commitSha":"f5161e79d3f8c53877f9b1b0d72e1c10bff775ba"},{"id":"component:a9b65e46e7454e88000b6e20","repositoryId":"opencode:10787","repositorySlug":"opencode-10787","repositoryName":"LLM Questionnaire Benchmarking Framework","repositoryPathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","ecosystem":"pypi","name":"fonttools","identity":"pypi:fonttools","version":"4.59.2","versionKey":"pypi:fonttools@4.59.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b55661fee93d4733461df8e9c2b491b9205aac2","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-questionnaire-benchmarking-framework/-/blob/4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd/uv.lock","commitSha":"4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd"},{"id":"component:e7d2aebb16a3c6ec5aa6b4e4","repositoryId":"opencode:4112","repositorySlug":"opencode-4112","repositoryName":"Objection management","repositoryPathWithNamespace":"uba-ki-lab/objection-management","ecosystem":"pypi","name":"fonttools","identity":"pypi:fonttools","version":"4.55.3","versionKey":"pypi:fonttools@4.55.3","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"8515db65670904208e99397a2d7878af759c74f3","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/objection-management/-/blob/5c1425bf9990cf12c5ae8ada47d249710703af18/uv.lock","commitSha":"5c1425bf9990cf12c5ae8ada47d249710703af18"},{"id":"component:d97a0a90bc2307014b711dfd","repositoryId":"opencode:5201","repositorySlug":"opencode-5201","repositoryName":"photovoltaic_systems","repositoryPathWithNamespace":"uba-ki-lab/photovoltaic_systems","ecosystem":"pypi","name":"fonttools","identity":"pypi:fonttools","version":"4.58.0","versionKey":"pypi:fonttools@4.58.0","direct":null,"development":null,"sourceKind":"sbom-json","filePath":"sbom.json","blobSha":"90b7d669fbf37c00e7bd5bf4e73a60e7eb78927e","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/photovoltaic_systems/-/blob/d0ec9137f2985f323b9aad141d83c47d14c64cce/sbom.json","commitSha":"d0ec9137f2985f323b9aad141d83c47d14c64cce"},{"id":"component:99dfc957d7463a6d88a0c253","repositoryId":"opencode:10775","repositorySlug":"opencode-10775","repositoryName":"Ressource Efficient Computer Vision","repositoryPathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","ecosystem":"pypi","name":"fonttools","identity":"pypi:fonttools","version":"4.61.1","versionKey":"pypi:fonttools@4.61.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"047f47304acd18a48770c101f5a8383cd19bb134","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/ressource-efficient-computer-vision/-/blob/9aa07461b879a6161b7e901ea4c2a382b8f1b4ae/uv.lock","commitSha":"9aa07461b879a6161b7e901ea4c2a382b8f1b4ae"},{"id":"component:c8044fa80d899ac77cfda62d","repositoryId":"opencode:10162","repositorySlug":"opencode-10162","repositoryName":"SmartPlanAI Anwendung","repositoryPathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","ecosystem":"pypi","name":"fonttools","identity":"pypi:fonttools","version":"4.62.1","versionKey":"pypi:fonttools@4.62.1","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"6b17710ca48cf83827a909c320d60853c75d7960","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f"},{"id":"component:76d726c75515765db12a6413","repositoryId":"opencode:5142","repositorySlug":"opencode-5142","repositoryName":"strahlenexposition","repositoryPathWithNamespace":"uba-ki-lab/strahlenexposition","ecosystem":"pypi","name":"fonttools","identity":"pypi:fonttools","version":"4.57.0","versionKey":"pypi:fonttools@4.57.0","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"681193f56a8b37b97336b2682fc1147ac3bdab1f","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/strahlenexposition/-/blob/1dd9cd8ca823a7998b729adce6957848cf241d54/poetry.lock","commitSha":"1dd9cd8ca823a7998b729adce6957848cf241d54"},{"id":"component:7c0322d8a48afa757cf77eac","repositoryId":"opencode:5142","repositorySlug":"opencode-5142","repositoryName":"strahlenexposition","repositoryPathWithNamespace":"uba-ki-lab/strahlenexposition","ecosystem":"pypi","name":"fonttools","identity":"pypi:fonttools","version":"4.57.0","versionKey":"pypi:fonttools@4.57.0","direct":null,"development":null,"sourceKind":"sbom-json","filePath":"sbom.json","blobSha":"bce3149701e5462f1af80e9221c0e2967402d606","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/strahlenexposition/-/blob/1dd9cd8ca823a7998b729adce6957848cf241d54/sbom.json","commitSha":"1dd9cd8ca823a7998b729adce6957848cf241d54"}],"occurrenceCount":9},"related":{"repositories":[{"id":"opencode:5142","slug":"opencode-5142","name":"strahlenexposition","pathWithNamespace":"uba-ki-lab/strahlenexposition","versions":["4.57.0"],"evidenceCount":2},{"id":"opencode:6174","slug":"opencode-6174","name":"Energieautarkes Wohnquartier - Backend","pathWithNamespace":"energieautarkes-wohnquartier/backend","versions":["4.58.0"],"evidenceCount":1},{"id":"opencode:10162","slug":"opencode-10162","name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","versions":["4.62.1"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["4.58.5"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["4.59.2"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["4.55.3"],"evidenceCount":1},{"id":"opencode:5201","slug":"opencode-5201","name":"photovoltaic_systems","pathWithNamespace":"uba-ki-lab/photovoltaic_systems","versions":["4.58.0"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["4.61.1"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-768j-98cg-p3fv","slug":"ghsa-768j-98cg-p3fv-0815ff07","dossier":false,"summary":"fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib","aliases":["CVE-2025-66034","PYSEC-2026-1389"],"sourceIds":["GHSA-768j-98cg-p3fv","PYSEC-2026-1389"],"published":"2025-12-01T19:07:00Z","modified":"2026-07-07T17:57:24.966058048Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:L"}],"references":[{"type":"WEB","url":"https://github.com/fonttools/fonttools/security/advisories/GHSA-768j-98cg-p3fv"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66034"},{"type":"WEB","url":"https://github.com/fonttools/fonttools/commit/a696d5ba93270d5954f98e7cab5ddca8a02c1e32"},{"type":"PACKAGE","url":"https://github.com/fonttools/fonttools"},{"type":"PACKAGE","url":"https://pypi.org/project/fonttools"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-768j-98cg-p3fv"}],"versionKeys":["pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2"],"packageCount":1,"repositoryCount":6}]}}