{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-07-20T14:37:29.537Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-07-20T14:36:19.763Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":30,"completeTreeCount":29,"incompleteTreeCount":1,"lockfileRepositoryCount":17,"sbomRepositoryCount":4,"artifactRepositoryCount":20,"resolvedRepositoryCount":29,"resolvedArtifactRepositoryCount":20,"dependencyFileCount":33,"parsedFileCount":32,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4205,"metadataResolvedCount":4191,"metadataNotFoundCount":14,"osvEvaluatedVersionCount":4205,"codeRadarRepositoryCount":30},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":5000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":30,"packageCount":2831,"aiPackageCount":41,"resolvedComponentCount":7181,"resolvedVersionCount":4205,"providerExposureRepositoryCount":7,"licenseExpressionCount":57,"knownLicensePackageCount":2796,"unknownLicensePackageCount":35,"advisoryCount":572,"matchedAdvisoryRepositoryCount":25,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":18,"repositoryShare":0.6}},"kind":"paket","entity":{"id":"package:npm:@huggingface/transformers","slug":"huggingface-transformers-cf1f05d0","identity":"npm:@huggingface/transformers","ecosystem":"npm","name":"@huggingface/transformers","label":"Transformers.js","category":"model-runtime","aiRelevant":true,"provider":{"id":"hugging-face","label":"Hugging Face"},"repositoryCount":1,"occurrenceCount":1,"directRepositoryCount":1,"versionCount":1,"licenseExpressions":["Apache-2.0"],"advisoryIds":[],"advisoryCount":0,"verifiedAttestation":false,"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["4.2.0"],"evidenceCount":1}],"versions":[{"version":"4.2.0","repositoryCount":1,"occurrenceCount":1,"ageDays":88,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-04-22T16:28:41Z","deprecated":false,"deprecatedReason":null,"licenses":["Apache-2.0"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://github.com/huggingface/transformers.js#readme"},{"label":"ISSUE_TRACKER","url":"https://github.com/huggingface/transformers.js/issues"},{"label":"ORIGIN","url":"https://registry.npmjs.org/@huggingface%2Ftransformers/4.2.0"}],"relatedProjects":[{"id":"github.com/huggingface/transformers.js","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/huggingface/transformers.js","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":null}}]},"evidence":{"occurrences":[{"id":"component:4ad807fae66a3f519ff31766","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"npm","name":"@huggingface/transformers","identity":"npm:@huggingface/transformers","version":"4.2.0","versionKey":"npm:@huggingface/transformers@4.2.0","direct":true,"development":false,"sourceKind":"npm-lock","filePath":"mucgpt-frontend/package-lock.json","blobSha":"0fe3200fb5ed4818a8824d26ddbb7c6b0a79c3d2","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/mucgpt-frontend/package-lock.json","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"}],"occurrenceCount":1},"related":{"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["4.2.0"],"evidenceCount":1}],"vulnerabilities":[]}}