{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-07-20T14:37:29.537Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-07-20T14:36:19.763Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":30,"completeTreeCount":29,"incompleteTreeCount":1,"lockfileRepositoryCount":17,"sbomRepositoryCount":4,"artifactRepositoryCount":20,"resolvedRepositoryCount":29,"resolvedArtifactRepositoryCount":20,"dependencyFileCount":33,"parsedFileCount":32,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4205,"metadataResolvedCount":4191,"metadataNotFoundCount":14,"osvEvaluatedVersionCount":4205,"codeRadarRepositoryCount":30},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":5000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":30,"packageCount":2831,"aiPackageCount":41,"resolvedComponentCount":7181,"resolvedVersionCount":4205,"providerExposureRepositoryCount":7,"licenseExpressionCount":57,"knownLicensePackageCount":2796,"unknownLicensePackageCount":35,"advisoryCount":572,"matchedAdvisoryRepositoryCount":25,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":18,"repositoryShare":0.6}},"kind":"paket","entity":{"id":"package:pypi:lmcache","slug":"lmcache-924a3cee","identity":"pypi:lmcache","ecosystem":"pypi","name":"lmcache","label":"LMCache","category":"model-runtime","aiRelevant":true,"provider":null,"repositoryCount":1,"occurrenceCount":1,"directRepositoryCount":0,"versionCount":1,"licenseExpressions":[],"advisoryIds":["GHSA-3hh9-752g-5g22"],"advisoryCount":1,"verifiedAttestation":false,"repositories":[{"id":"opencode:7674","slug":"opencode-7674","name":"Coding Agent Usage Simulation","pathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","versions":["0.3.8"],"evidenceCount":1}],"versions":[{"version":"0.3.8","repositoryCount":1,"occurrenceCount":1,"ageDays":null,"advisoryIds":["GHSA-3hh9-752g-5g22"],"metadata":{"state":"not_found","checkedAt":"2026-07-20T03:19:50.101Z"}}]},"evidence":{"occurrences":[{"id":"component:cf0865a0bac8e0316454842f","repositoryId":"opencode:7674","repositorySlug":"opencode-7674","repositoryName":"Coding Agent Usage Simulation","repositoryPathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","ecosystem":"pypi","name":"lmcache","identity":"pypi:lmcache","version":"0.3.8","versionKey":"pypi:lmcache@0.3.8","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b1464cf01496db34285bf91f7841aed50559816","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/coding-agent-usage-simulation/-/blob/fe8ab81af4926a34c6cf1f3a807ffeda2b398f32/uv.lock","commitSha":"fe8ab81af4926a34c6cf1f3a807ffeda2b398f32"}],"occurrenceCount":1},"related":{"repositories":[{"id":"opencode:7674","slug":"opencode-7674","name":"Coding Agent Usage Simulation","pathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","versions":["0.3.8"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-3hh9-752g-5g22","slug":"ghsa-3hh9-752g-5g22-02d6de07","dossier":false,"summary":"LMCache: 16-bit multimodal hash collision can poison KV cache entries","aliases":["CVE-2026-10813"],"sourceIds":["GHSA-3hh9-752g-5g22"],"published":"2026-06-04T18:30:31Z","modified":"2026-07-15T22:30:42.987212579Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10813"},{"type":"WEB","url":"https://github.com/LMCache/LMCache/issues/3301"},{"type":"WEB","url":"https://github.com/LMCache/LMCache/pull/2932"},{"type":"PACKAGE","url":"https://github.com/LMCache/LMCache"},{"type":"WEB","url":"https://vuldb.com/cve/CVE-2026-10813"},{"type":"WEB","url":"https://vuldb.com/submit/831641"},{"type":"WEB","url":"https://vuldb.com/vuln/368261"},{"type":"WEB","url":"https://vuldb.com/vuln/368261/cti"}],"versionKeys":["pypi:lmcache@0.3.8"],"packageCount":1,"repositoryCount":1}]}}