{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-07-20T15:03:09.339Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-07-20T15:01:18.334Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":30,"completeTreeCount":29,"incompleteTreeCount":1,"lockfileRepositoryCount":17,"sbomRepositoryCount":4,"artifactRepositoryCount":20,"resolvedRepositoryCount":29,"resolvedArtifactRepositoryCount":20,"dependencyFileCount":33,"parsedFileCount":32,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4205,"metadataResolvedCount":4191,"metadataNotFoundCount":14,"osvEvaluatedVersionCount":4205,"codeRadarRepositoryCount":30},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":5000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":30,"packageCount":2831,"aiPackageCount":41,"resolvedComponentCount":7181,"resolvedVersionCount":4205,"providerExposureRepositoryCount":7,"licenseExpressionCount":57,"knownLicensePackageCount":2796,"unknownLicensePackageCount":35,"advisoryCount":572,"matchedAdvisoryRepositoryCount":25,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":18,"repositoryShare":0.6}},"kind":"paket","entity":{"id":"package:pypi:jupyter-core","slug":"jupyter-core-44178c79","identity":"pypi:jupyter-core","ecosystem":"pypi","name":"jupyter-core","label":"jupyter-core","category":null,"aiRelevant":false,"provider":null,"repositoryCount":6,"occurrenceCount":8,"directRepositoryCount":0,"versionCount":3,"licenseExpressions":["BSD-3-Clause","non-standard"],"advisoryIds":["GHSA-33p9-3p43-82vq"],"advisoryCount":1,"verifiedAttestation":false,"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["5.9.1"],"evidenceCount":3},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["5.8.1"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["5.7.2"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["5.9.1"],"evidenceCount":1},{"id":"opencode:5142","slug":"opencode-5142","name":"strahlenexposition","pathWithNamespace":"uba-ki-lab/strahlenexposition","versions":["5.7.2"],"evidenceCount":1},{"id":"opencode:7788","slug":"opencode-7788","name":"Workshop Green LLM Usage","pathWithNamespace":"uba-ki-lab/workshop-green-llm-usage","versions":["5.9.1"],"evidenceCount":1}],"versions":[{"version":"5.7.2","repositoryCount":2,"occurrenceCount":2,"ageDays":860,"advisoryIds":["GHSA-33p9-3p43-82vq"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2024-03-12T12:37:32Z","deprecated":false,"deprecatedReason":null,"licenses":["non-standard"],"advisoryIds":["GHSA-33p9-3p43-82vq","PYSEC-2026-1477"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/jupyter/jupyter_core"},{"label":"HOMEPAGE","url":"https://jupyter.org/"},{"label":"DOCUMENTATION","url":"https://jupyter-core.readthedocs.io/"}],"relatedProjects":[{"id":"github.com/jupyter/jupyter_core","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"5.8.1","repositoryCount":1,"occurrenceCount":1,"ageDays":419,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-05-27T07:38:15Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://jupyter.org/"},{"label":"DOCUMENTATION","url":"https://jupyter-core.readthedocs.io/"},{"label":"SOURCE_REPO","url":"https://github.com/jupyter/jupyter_core"}],"relatedProjects":[{"id":"github.com/jupyter/jupyter_core","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"5.9.1","repositoryCount":3,"occurrenceCount":5,"ageDays":276,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-10-16T19:19:16Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":[],"links":[{"label":"DOCUMENTATION","url":"https://jupyter-core.readthedocs.io/"},{"label":"SOURCE_REPO","url":"https://github.com/jupyter/jupyter_core"},{"label":"HOMEPAGE","url":"https://jupyter.org/"}],"relatedProjects":[{"id":"github.com/jupyter/jupyter_core","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:24efcbb3165885a4d2ff7d45","repositoryId":"opencode:5530","repositorySlug":"opencode-5530","repositoryName":"GSA Extraction","repositoryPathWithNamespace":"uba-ki-lab/gsa-extraction","ecosystem":"pypi","name":"jupyter-core","identity":"pypi:jupyter-core","version":"5.8.1","versionKey":"pypi:jupyter-core@5.8.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"fbb23733e647554b5678500b3f17f13bac7f77f5","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/gsa-extraction/-/blob/f5161e79d3f8c53877f9b1b0d72e1c10bff775ba/uv.lock","commitSha":"f5161e79d3f8c53877f9b1b0d72e1c10bff775ba"},{"id":"component:d97389eb6893613066ef4df6","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"jupyter-core","identity":"pypi:jupyter-core","version":"5.9.1","versionKey":"pypi:jupyter-core@5.9.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-assistant-service/uv.lock","blobSha":"36b26ae58598809148cf87cffcc3b67380e8b928","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/mucgpt-assistant-service/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"},{"id":"component:1a820eab5b93afc1bed71614","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"jupyter-core","identity":"pypi:jupyter-core","version":"5.9.1","versionKey":"pypi:jupyter-core@5.9.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-core-service/uv.lock","blobSha":"8bf6980137a09f5692c9e62798298a2cd9122a99","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/mucgpt-core-service/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"},{"id":"component:bef0d02505f1d7b08658efa8","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"jupyter-core","identity":"pypi:jupyter-core","version":"5.9.1","versionKey":"pypi:jupyter-core@5.9.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"77989726989ea666c8557d105b2bf2c064daa319","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"},{"id":"component:4716d5276936e4e9066eee70","repositoryId":"opencode:4112","repositorySlug":"opencode-4112","repositoryName":"Objection management","repositoryPathWithNamespace":"uba-ki-lab/objection-management","ecosystem":"pypi","name":"jupyter-core","identity":"pypi:jupyter-core","version":"5.7.2","versionKey":"pypi:jupyter-core@5.7.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"8515db65670904208e99397a2d7878af759c74f3","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/objection-management/-/blob/5c1425bf9990cf12c5ae8ada47d249710703af18/uv.lock","commitSha":"5c1425bf9990cf12c5ae8ada47d249710703af18"},{"id":"component:b07f588f7b77f8f264984bba","repositoryId":"opencode:10775","repositorySlug":"opencode-10775","repositoryName":"Ressource Efficient Computer Vision","repositoryPathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","ecosystem":"pypi","name":"jupyter-core","identity":"pypi:jupyter-core","version":"5.9.1","versionKey":"pypi:jupyter-core@5.9.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"047f47304acd18a48770c101f5a8383cd19bb134","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/ressource-efficient-computer-vision/-/blob/9aa07461b879a6161b7e901ea4c2a382b8f1b4ae/uv.lock","commitSha":"9aa07461b879a6161b7e901ea4c2a382b8f1b4ae"},{"id":"component:5f3c3b3d1a728d8b4d3d4a61","repositoryId":"opencode:5142","repositorySlug":"opencode-5142","repositoryName":"strahlenexposition","repositoryPathWithNamespace":"uba-ki-lab/strahlenexposition","ecosystem":"pypi","name":"jupyter-core","identity":"pypi:jupyter-core","version":"5.7.2","versionKey":"pypi:jupyter-core@5.7.2","direct":null,"development":null,"sourceKind":"sbom-json","filePath":"sbom.json","blobSha":"bce3149701e5462f1af80e9221c0e2967402d606","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/strahlenexposition/-/blob/1dd9cd8ca823a7998b729adce6957848cf241d54/sbom.json","commitSha":"1dd9cd8ca823a7998b729adce6957848cf241d54"},{"id":"component:9cf5f4b5d7005fb9ffa983f3","repositoryId":"opencode:7788","repositorySlug":"opencode-7788","repositoryName":"Workshop Green LLM Usage","repositoryPathWithNamespace":"uba-ki-lab/workshop-green-llm-usage","ecosystem":"pypi","name":"jupyter-core","identity":"pypi:jupyter-core","version":"5.9.1","versionKey":"pypi:jupyter-core@5.9.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"bf2ad06a6324960d4a6a7a91340009e907848d0a","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/workshop-green-llm-usage/-/blob/d72ec94b58729e8b5e32caa9484867ec13add189/uv.lock","commitSha":"d72ec94b58729e8b5e32caa9484867ec13add189"}],"occurrenceCount":8},"related":{"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["5.9.1"],"evidenceCount":3},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["5.8.1"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["5.7.2"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["5.9.1"],"evidenceCount":1},{"id":"opencode:5142","slug":"opencode-5142","name":"strahlenexposition","pathWithNamespace":"uba-ki-lab/strahlenexposition","versions":["5.7.2"],"evidenceCount":1},{"id":"opencode:7788","slug":"opencode-7788","name":"Workshop Green LLM Usage","pathWithNamespace":"uba-ki-lab/workshop-green-llm-usage","versions":["5.9.1"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-33p9-3p43-82vq","slug":"ghsa-33p9-3p43-82vq-f6a57ddd","dossier":false,"summary":"Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","aliases":["CVE-2025-30167","PYSEC-2026-1477"],"sourceIds":["GHSA-33p9-3p43-82vq","PYSEC-2026-1477"],"published":"2025-06-04T21:00:23Z","modified":"2026-07-07T17:57:34.145908633Z","checkedAt":"2026-07-20T15:03:09.339Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/jupyter/jupyter_core/security/advisories/GHSA-33p9-3p43-82vq"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30167"},{"type":"WEB","url":"https://github.com/jupyter/jupyter_core/commit/5e8965600adda6b416692ce7e85ecb2bd814bd52"},{"type":"PACKAGE","url":"https://github.com/jupyter/jupyter_core"},{"type":"PACKAGE","url":"https://pypi.org/project/jupyter-core"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-33p9-3p43-82vq"}],"versionKeys":["pypi:jupyter-core@5.7.2"],"packageCount":1,"repositoryCount":2}]}}
