{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-07-20T14:37:29.537Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-07-20T14:36:19.763Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":30,"completeTreeCount":29,"incompleteTreeCount":1,"lockfileRepositoryCount":17,"sbomRepositoryCount":4,"artifactRepositoryCount":20,"resolvedRepositoryCount":29,"resolvedArtifactRepositoryCount":20,"dependencyFileCount":33,"parsedFileCount":32,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4205,"metadataResolvedCount":4191,"metadataNotFoundCount":14,"osvEvaluatedVersionCount":4205,"codeRadarRepositoryCount":30},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":5000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":30,"packageCount":2831,"aiPackageCount":41,"resolvedComponentCount":7181,"resolvedVersionCount":4205,"providerExposureRepositoryCount":7,"licenseExpressionCount":57,"knownLicensePackageCount":2796,"unknownLicensePackageCount":35,"advisoryCount":572,"matchedAdvisoryRepositoryCount":25,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":18,"repositoryShare":0.6}},"kind":"paket","entity":{"id":"package:pypi:langchain","slug":"langchain-2b3b6a0b","identity":"pypi:langchain","ecosystem":"pypi","name":"langchain","label":"LangChain","category":"orchestration","aiRelevant":true,"provider":null,"repositoryCount":6,"occurrenceCount":8,"directRepositoryCount":2,"versionCount":6,"licenseExpressions":["MIT"],"advisoryIds":["GHSA-3644-q5cj-c5c7","GHSA-gr75-jv2w-4656","PYSEC-2024-323"],"advisoryCount":3,"verifiedAttestation":false,"repositories":[{"id":"opencode:5711","slug":"opencode-5711","name":"Chat","pathWithNamespace":"f13/microservices/chat","versions":["1.3.11","1.3.8"],"evidenceCount":2},{"id":"opencode:11665","slug":"opencode-11665","name":"Chat","pathWithNamespace":"oc000155135727/chat","versions":["1.3.11"],"evidenceCount":2},{"id":"opencode:4609","slug":"opencode-4609","name":"LLM_Workshop","pathWithNamespace":"bbsr_ida_public/llm_workshop","versions":["0.3.7"],"evidenceCount":1},{"id":"opencode:8742","slug":"opencode-8742","name":"ai-websearch-benchmark","pathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","versions":["1.2.6"],"evidenceCount":1},{"id":"opencode:4166","slug":"opencode-4166","name":"ai-legal-graph","pathWithNamespace":"iorb/ai-legal-graph","versions":["0.2.7"],"evidenceCount":1},{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["1.3.9"],"evidenceCount":1}],"versions":[{"version":"0.2.7","repositoryCount":1,"occurrenceCount":1,"ageDays":741,"advisoryIds":["GHSA-3644-q5cj-c5c7","GHSA-gr75-jv2w-4656","PYSEC-2024-323"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2024-07-08T22:12:02Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-3644-q5cj-c5c7","GHSA-gr75-jv2w-4656","PYSEC-2024-323","PYSEC-2026-2192","PYSEC-2026-2555"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langchain"}],"relatedProjects":[{"id":"github.com/langchain-ai/langchain","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"0.3.7","repositoryCount":1,"occurrenceCount":1,"ageDays":625,"advisoryIds":["GHSA-3644-q5cj-c5c7","GHSA-gr75-jv2w-4656"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2024-11-01T20:45:47Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-3644-q5cj-c5c7","GHSA-gr75-jv2w-4656","PYSEC-2026-2192","PYSEC-2026-2555"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langchain"}],"relatedProjects":[{"id":"github.com/langchain-ai/langchain","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.2.6","repositoryCount":1,"occurrenceCount":1,"ageDays":184,"advisoryIds":["GHSA-gr75-jv2w-4656"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-01-16T19:21:18Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-gr75-jv2w-4656","PYSEC-2026-2192"],"links":[{"label":"DOCUMENTATION","url":"https://reference.langchain.com/python/langchain/langchain/"},{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langchain"},{"label":"HOMEPAGE","url":"https://docs.langchain.com/"}],"relatedProjects":[{"id":"github.com/langchain-ai/langchain","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.3.8","repositoryCount":1,"occurrenceCount":1,"ageDays":38,"advisoryIds":["GHSA-gr75-jv2w-4656"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-06-12T04:20:33Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-gr75-jv2w-4656","PYSEC-2026-2192"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langchain"},{"label":"HOMEPAGE","url":"https://docs.langchain.com/"},{"label":"DOCUMENTATION","url":"https://reference.langchain.com/python/langchain/langchain/"},{"label":"ISSUE_TRACKER","url":"https://github.com/langchain-ai/langchain/issues"}],"relatedProjects":[{"id":"github.com/langchain-ai/langchain","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/langchain-ai/langchain","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.3.9","repositoryCount":1,"occurrenceCount":1,"ageDays":37,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-06-12T16:53:25Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langchain"},{"label":"HOMEPAGE","url":"https://docs.langchain.com/"},{"label":"DOCUMENTATION","url":"https://reference.langchain.com/python/langchain/langchain/"},{"label":"ISSUE_TRACKER","url":"https://github.com/langchain-ai/langchain/issues"}],"relatedProjects":[{"id":"github.com/langchain-ai/langchain","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/langchain-ai/langchain","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.3.11","repositoryCount":2,"occurrenceCount":3,"ageDays":27,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-06-22T23:00:31Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langchain"},{"label":"HOMEPAGE","url":"https://docs.langchain.com/"},{"label":"DOCUMENTATION","url":"https://reference.langchain.com/python/langchain/langchain/"},{"label":"ISSUE_TRACKER","url":"https://github.com/langchain-ai/langchain/issues"}],"relatedProjects":[{"id":"github.com/langchain-ai/langchain","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/langchain-ai/langchain","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:f6a4a165828a412434883efe","repositoryId":"opencode:4166","repositorySlug":"opencode-4166","repositoryName":"ai-legal-graph","repositoryPathWithNamespace":"iorb/ai-legal-graph","ecosystem":"pypi","name":"langchain","identity":"pypi:langchain","version":"0.2.7","versionKey":"pypi:langchain@0.2.7","direct":true,"development":false,"sourceKind":"exact-manifest-pin","filePath":"requirements.txt","blobSha":"eb8e9a474c655bc81e1a5841cf757dec75775529","sourceUrl":"https://gitlab.opencode.de/iorb/ai-legal-graph/-/blob/8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be/requirements.txt","commitSha":"8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be"},{"id":"component:c798bd64ebd6a3d0871754f3","repositoryId":"opencode:8742","repositorySlug":"opencode-8742","repositoryName":"ai-websearch-benchmark","repositoryPathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","ecosystem":"pypi","name":"langchain","identity":"pypi:langchain","version":"1.2.6","versionKey":"pypi:langchain@1.2.6","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"4f7b4e2e096e186e4408b529568676aa8c71ba55","sourceUrl":"https://gitlab.opencode.de/datenlabor-bmz/ai-websearch-benchmark/-/blob/cd6b854b1b400d7e45796aaa22bded8183642916/uv.lock","commitSha":"cd6b854b1b400d7e45796aaa22bded8183642916"},{"id":"component:7c7d515f8ad28e9ad7da1f11","repositoryId":"opencode:11665","repositorySlug":"opencode-11665","repositoryName":"Chat","repositoryPathWithNamespace":"oc000155135727/chat","ecosystem":"pypi","name":"langchain","identity":"pypi:langchain","version":"1.3.11","versionKey":"pypi:langchain@1.3.11","direct":false,"development":false,"sourceKind":"exact-manifest-pin","filePath":"requirements-dev.txt","blobSha":"fd14e62cdbbceb707e82de32261f078ce7e761e6","sourceUrl":"https://gitlab.opencode.de/oc000155135727/chat/-/blob/5a50523649346b69cc333b11dd289783f02c7a44/requirements-dev.txt","commitSha":"5a50523649346b69cc333b11dd289783f02c7a44"},{"id":"component:e15453c7230fd9d49108550b","repositoryId":"opencode:11665","repositorySlug":"opencode-11665","repositoryName":"Chat","repositoryPathWithNamespace":"oc000155135727/chat","ecosystem":"pypi","name":"langchain","identity":"pypi:langchain","version":"1.3.11","versionKey":"pypi:langchain@1.3.11","direct":false,"development":false,"sourceKind":"exact-manifest-pin","filePath":"requirements.txt","blobSha":"609077cf5528aa4d11e7334fbb27ee972681b7b2","sourceUrl":"https://gitlab.opencode.de/oc000155135727/chat/-/blob/5a50523649346b69cc333b11dd289783f02c7a44/requirements.txt","commitSha":"5a50523649346b69cc333b11dd289783f02c7a44"},{"id":"component:5c93168b16d9a0f45a82a975","repositoryId":"opencode:5711","repositorySlug":"opencode-5711","repositoryName":"Chat","repositoryPathWithNamespace":"f13/microservices/chat","ecosystem":"pypi","name":"langchain","identity":"pypi:langchain","version":"1.3.11","versionKey":"pypi:langchain@1.3.11","direct":false,"development":false,"sourceKind":"exact-manifest-pin","filePath":"requirements.txt","blobSha":"a6eda97cd26e2e09417c240a3db1e9a304e099d2","sourceUrl":"https://gitlab.opencode.de/f13/microservices/chat/-/blob/a93870fdf9bd76e9b0e5000a4c35906b58dc77d5/requirements.txt","commitSha":"a93870fdf9bd76e9b0e5000a4c35906b58dc77d5"},{"id":"component:655f952e619685e4b5eef74d","repositoryId":"opencode:5711","repositorySlug":"opencode-5711","repositoryName":"Chat","repositoryPathWithNamespace":"f13/microservices/chat","ecosystem":"pypi","name":"langchain","identity":"pypi:langchain","version":"1.3.8","versionKey":"pypi:langchain@1.3.8","direct":false,"development":false,"sourceKind":"exact-manifest-pin","filePath":"requirements-dev.txt","blobSha":"cb5de92f20847716cb1365424c1487ef7737c5a3","sourceUrl":"https://gitlab.opencode.de/f13/microservices/chat/-/blob/a93870fdf9bd76e9b0e5000a4c35906b58dc77d5/requirements-dev.txt","commitSha":"a93870fdf9bd76e9b0e5000a4c35906b58dc77d5"},{"id":"component:12029cc19f11b7f9de62c284","repositoryId":"opencode:4609","repositorySlug":"opencode-4609","repositoryName":"LLM_Workshop","repositoryPathWithNamespace":"bbsr_ida_public/llm_workshop","ecosystem":"pypi","name":"langchain","identity":"pypi:langchain","version":"0.3.7","versionKey":"pypi:langchain@0.3.7","direct":true,"development":false,"sourceKind":"exact-manifest-pin","filePath":"docker/requirements.txt","blobSha":"0d707ff70a4c5b3584990d5380c8bf62c64284b5","sourceUrl":"https://gitlab.opencode.de/bbsr_ida_public/llm_workshop/-/blob/fddd886ab2fd3824e269d40cefde90cbed709201/docker/requirements.txt","commitSha":"fddd886ab2fd3824e269d40cefde90cbed709201"},{"id":"component:ae85b2a1fd118123013244bb","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"langchain","identity":"pypi:langchain","version":"1.3.9","versionKey":"pypi:langchain@1.3.9","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-core-service/uv.lock","blobSha":"8bf6980137a09f5692c9e62798298a2cd9122a99","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/mucgpt-core-service/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"}],"occurrenceCount":8},"related":{"repositories":[{"id":"opencode:5711","slug":"opencode-5711","name":"Chat","pathWithNamespace":"f13/microservices/chat","versions":["1.3.11","1.3.8"],"evidenceCount":2},{"id":"opencode:11665","slug":"opencode-11665","name":"Chat","pathWithNamespace":"oc000155135727/chat","versions":["1.3.11"],"evidenceCount":2},{"id":"opencode:4609","slug":"opencode-4609","name":"LLM_Workshop","pathWithNamespace":"bbsr_ida_public/llm_workshop","versions":["0.3.7"],"evidenceCount":1},{"id":"opencode:8742","slug":"opencode-8742","name":"ai-websearch-benchmark","pathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","versions":["1.2.6"],"evidenceCount":1},{"id":"opencode:4166","slug":"opencode-4166","name":"ai-legal-graph","pathWithNamespace":"iorb/ai-legal-graph","versions":["0.2.7"],"evidenceCount":1},{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["1.3.9"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-3644-q5cj-c5c7","slug":"ghsa-3644-q5cj-c5c7-4c578cf2","dossier":false,"summary":"LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning","aliases":["CVE-2026-45134","PYSEC-2026-2555","PYSEC-2026-2560","PYSEC-2026-2582"],"sourceIds":["GHSA-3644-q5cj-c5c7","PYSEC-2026-2555","PYSEC-2026-2560","PYSEC-2026-2582"],"published":"2026-05-13T15:29:30Z","modified":"2026-07-13T16:43:39.736848907Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-3644-q5cj-c5c7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45134"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langsmith-sdk"},{"type":"PACKAGE","url":"https://pypi.org/project/langchain"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-3644-q5cj-c5c7"},{"type":"PACKAGE","url":"https://pypi.org/project/langchain-classic"},{"type":"PACKAGE","url":"https://pypi.org/project/langsmith"}],"versionKeys":["pypi:langchain-classic@1.0.1","pypi:langchain@0.2.7","pypi:langchain@0.3.7","pypi:langsmith@0.6.4"],"packageCount":3,"repositoryCount":3},{"id":"GHSA-gr75-jv2w-4656","slug":"ghsa-gr75-jv2w-4656-a5b8c61e","dossier":false,"summary":"LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders","aliases":["CVE-2026-55443","PYSEC-2026-2192","PYSEC-2026-2556"],"sourceIds":["GHSA-gr75-jv2w-4656","PYSEC-2026-2192"],"published":"2026-06-16T15:03:14Z","modified":"2026-07-13T16:43:09.845932020Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/langchain-ai/langchain/security/advisories/GHSA-gr75-jv2w-4656"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55443"},{"type":"FIX","url":"https://github.com/langchain-ai/langchain/commit/dcaf7795a3e6590af55c3ff7bda6add6355e9ea6"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langchain"}],"versionKeys":["pypi:langchain@0.2.7","pypi:langchain@0.3.7","pypi:langchain@1.2.6","pypi:langchain@1.3.8"],"packageCount":1,"repositoryCount":4},{"id":"PYSEC-2024-323","slug":"pysec-2024-323-1dd96856","dossier":false,"summary":null,"aliases":["CVE-2024-5998","GHSA-f2jm-rw3h-6phg","PYSEC-2026-1514"],"sourceIds":["PYSEC-2024-323"],"published":"2024-09-17T12:15:02.977Z","modified":"2026-07-13T07:26:23.643495355Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"FIX","url":"https://github.com/langchain-ai/langchain/commit/604dfe2d99246b0c09f047c604f0c63eafba31e7"},{"type":"EVIDENCE","url":"https://huntr.com/bounties/fa3a2753-57c3-4e08-a176-d7a3ffda28fe"}],"versionKeys":["pypi:langchain@0.2.7"],"packageCount":1,"repositoryCount":1}]}}