{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-07-31T19:03:09.699Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-07-31T19:01:26.023Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":31,"completeTreeCount":30,"incompleteTreeCount":1,"lockfileRepositoryCount":18,"sbomRepositoryCount":4,"artifactRepositoryCount":21,"resolvedRepositoryCount":30,"resolvedArtifactRepositoryCount":21,"dependencyFileCount":32,"parsedFileCount":31,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":3642,"metadataResolvedCount":3632,"metadataNotFoundCount":10,"osvEvaluatedVersionCount":3642,"codeRadarRepositoryCount":31},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":8000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":31,"packageCount":2274,"aiPackageCount":44,"resolvedComponentCount":5994,"resolvedVersionCount":3642,"providerExposureRepositoryCount":6,"licenseExpressionCount":53,"knownLicensePackageCount":2244,"unknownLicensePackageCount":30,"advisoryCount":596,"matchedAdvisoryRepositoryCount":26,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":19,"repositoryShare":0.6129032258064516}},"kind":"paket","entity":{"id":"package:pypi:langchain-text-splitters","slug":"langchain-text-splitters-0c057788","identity":"pypi:langchain-text-splitters","ecosystem":"pypi","name":"langchain-text-splitters","label":"LangChain · Text Splitters","category":"orchestration","aiRelevant":true,"provider":null,"repositoryCount":3,"occurrenceCount":3,"directRepositoryCount":0,"versionCount":2,"licenseExpressions":["MIT"],"advisoryIds":["GHSA-fv5p-p927-qmxr"],"advisoryCount":1,"verifiedAttestation":false,"repositories":[{"id":"opencode:8742","slug":"opencode-8742","name":"ai-websearch-benchmark","pathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","versions":["1.1.0"],"evidenceCount":1},{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["1.1.2"],"evidenceCount":1},{"id":"opencode:12239","slug":"opencode-12239","name":"LLM Service","pathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","versions":["1.1.2"],"evidenceCount":1}],"versions":[{"version":"1.1.0","repositoryCount":1,"occurrenceCount":1,"ageDays":229,"advisoryIds":["GHSA-fv5p-p927-qmxr"],"metadata":{"state":"resolved","checkedAt":"2026-07-31T02:32:10.670Z","publishedAt":"2025-12-14T01:15:37Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-fv5p-p927-qmxr","PYSEC-2026-77"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langchain"},{"label":"HOMEPAGE","url":"https://docs.langchain.com/"},{"label":"DOCUMENTATION","url":"https://docs.langchain.com/"}],"relatedProjects":[{"id":"github.com/langchain-ai/langchain","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.1.2","repositoryCount":2,"occurrenceCount":2,"ageDays":106,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-31T02:32:10.670Z","publishedAt":"2026-04-16T14:20:38Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://docs.langchain.com/"},{"label":"DOCUMENTATION","url":"https://docs.langchain.com/"},{"label":"ISSUE_TRACKER","url":"https://github.com/langchain-ai/langchain/issues"},{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langchain"}],"relatedProjects":[{"id":"github.com/langchain-ai/langchain","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/langchain-ai/langchain","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:c710826dfea5eafe99b99ed3","repositoryId":"opencode:8742","repositorySlug":"opencode-8742","repositoryName":"ai-websearch-benchmark","repositoryPathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","ecosystem":"pypi","name":"langchain-text-splitters","identity":"pypi:langchain-text-splitters","version":"1.1.0","versionKey":"pypi:langchain-text-splitters@1.1.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"4f7b4e2e096e186e4408b529568676aa8c71ba55","sourceUrl":"https://gitlab.opencode.de/datenlabor-bmz/ai-websearch-benchmark/-/blob/cd6b854b1b400d7e45796aaa22bded8183642916/uv.lock","commitSha":"cd6b854b1b400d7e45796aaa22bded8183642916"},{"id":"component:94c9a89c841a667c9ae429d7","repositoryId":"opencode:12239","repositorySlug":"opencode-12239","repositoryName":"LLM Service","repositoryPathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","ecosystem":"pypi","name":"langchain-text-splitters","identity":"pypi:langchain-text-splitters","version":"1.1.2","versionKey":"pypi:langchain-text-splitters@1.1.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"5c34ec93b8f084fb238b9dfb84642a3091538e9d","sourceUrl":"https://gitlab.opencode.de/sh/diwish/splitbot/kosmo/llm-service/-/blob/318cda8c49da743f2c4a18a4f4d5c36fc22102fc/uv.lock","commitSha":"318cda8c49da743f2c4a18a4f4d5c36fc22102fc"},{"id":"component:a2f8d577fc6c6c725aebb4db","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"langchain-text-splitters","identity":"pypi:langchain-text-splitters","version":"1.1.2","versionKey":"pypi:langchain-text-splitters@1.1.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-core-service/uv.lock","blobSha":"8bf6980137a09f5692c9e62798298a2cd9122a99","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/4d053562adec8962a8e523b7ed27b48a9f882d60/mucgpt-core-service/uv.lock","commitSha":"4d053562adec8962a8e523b7ed27b48a9f882d60"}],"occurrenceCount":3},"related":{"repositories":[{"id":"opencode:8742","slug":"opencode-8742","name":"ai-websearch-benchmark","pathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","versions":["1.1.0"],"evidenceCount":1},{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["1.1.2"],"evidenceCount":1},{"id":"opencode:12239","slug":"opencode-12239","name":"LLM Service","pathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","versions":["1.1.2"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-fv5p-p927-qmxr","slug":"ghsa-fv5p-p927-qmxr-2692dd04","dossier":false,"summary":"LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass","aliases":["CVE-2026-41481","PYSEC-2026-77"],"sourceIds":["GHSA-fv5p-p927-qmxr","PYSEC-2026-77"],"published":"2026-04-16T22:53:32Z","modified":"2026-06-06T01:15:07.890699366Z","checkedAt":"2026-07-31T19:03:09.699Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/langchain-ai/langchain/security/advisories/GHSA-fv5p-p927-qmxr"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41481"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langchain"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/langchain-text-splitters/PYSEC-2026-77.yaml"}],"versionKeys":["pypi:langchain-text-splitters@1.1.0"],"packageCount":1,"repositoryCount":1}]}}
