{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-11-11T20:28:46.485Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-11-11T20:27:06.257Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.29.0","releaseDate":"2026-09-16T00:00:00Z"}},"coverage":{"repositoryCount":41,"completeTreeCount":40,"incompleteTreeCount":1,"lockfileRepositoryCount":24,"sbomRepositoryCount":6,"artifactRepositoryCount":28,"resolvedRepositoryCount":38,"resolvedArtifactRepositoryCount":28,"dependencyFileCount":42,"parsedFileCount":41,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4627,"metadataResolvedCount":4616,"metadataNotFoundCount":11,"osvEvaluatedVersionCount":4627,"codeRadarRepositoryCount":41},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":8000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":41,"packageCount":2707,"aiPackageCount":45,"resolvedComponentCount":8802,"resolvedVersionCount":4627,"providerExposureRepositoryCount":11,"licenseExpressionCount":62,"knownLicensePackageCount":2673,"unknownLicensePackageCount":34,"advisoryCount":1021,"matchedAdvisoryRepositoryCount":36,"topPackage":{"id":"package:pypi:typing-extensions","slug":"typing-extensions-87d153eb","label":"typing-extensions","repositoryCount":25,"repositoryShare":0.6097560975609756}},"kind":"paket","entity":{"id":"package:pypi:opentelemetry-api","slug":"opentelemetry-api-341bc8f7","identity":"pypi:opentelemetry-api","ecosystem":"pypi","name":"opentelemetry-api","label":"opentelemetry-api","category":null,"aiRelevant":false,"provider":null,"repositoryCount":12,"occurrenceCount":14,"directRepositoryCount":0,"versionCount":9,"licenseExpressions":["Apache-2.0"],"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"advisoryCount":1,"verifiedAttestation":false,"repositories":[{"id":"opencode:11332","slug":"opencode-11332","name":"sprachbuchung-erzmobil","pathWithNamespace":"erzmobil/ai-voicebot/sprachbuchung-erzmobil","versions":["1.45.1"],"evidenceCount":2},{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["1.45.1"],"evidenceCount":2},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["1.25.0"],"evidenceCount":1},{"id":"opencode:11084","slug":"opencode-11084","name":"Agent","pathWithNamespace":"f13/microservices/agentic-orchestrator","versions":["1.45.2"],"evidenceCount":1},{"id":"opencode:9852","slug":"opencode-9852","name":"Datastore","pathWithNamespace":"f13/microservices/datastore","versions":["1.45.2"],"evidenceCount":1},{"id":"opencode:5710","slug":"opencode-5710","name":"RAG","pathWithNamespace":"f13/microservices/rag","versions":["1.45.2"],"evidenceCount":1},{"id":"opencode:13669","slug":"opencode-13669","name":"sprache2text+meer - Transkription für Jugendamt Verwaltung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/aTrain","versions":["1.43.0"],"evidenceCount":1},{"id":"opencode:12239","slug":"opencode-12239","name":"LLM Service","pathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","versions":["1.28.2"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["1.34.1"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["1.36.0"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["1.26.0"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["1.39.1"],"evidenceCount":1}],"versions":[{"version":"1.25.0","repositoryCount":1,"occurrenceCount":1,"ageDays":894,"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"metadata":{"state":"resolved","checkedAt":"2026-11-11T16:56:07.984Z","publishedAt":"2024-05-31T01:40:00Z","deprecated":false,"deprecatedReason":null,"licenses":["Apache-2.0"],"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"links":[{"label":"HOMEPAGE","url":"https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-api"},{"label":"SOURCE_REPO","url":"https://github.com/open-telemetry/opentelemetry-python"}],"relatedProjects":[{"id":"github.com/open-telemetry/opentelemetry-python","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.26.0","repositoryCount":1,"occurrenceCount":1,"ageDays":839,"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"metadata":{"state":"resolved","checkedAt":"2026-11-11T16:56:07.984Z","publishedAt":"2024-07-25T04:01:38Z","deprecated":false,"deprecatedReason":null,"licenses":["Apache-2.0"],"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"links":[{"label":"HOMEPAGE","url":"https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-api"},{"label":"SOURCE_REPO","url":"https://github.com/open-telemetry/opentelemetry-python"}],"relatedProjects":[{"id":"github.com/open-telemetry/opentelemetry-python","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.28.2","repositoryCount":1,"occurrenceCount":1,"ageDays":723,"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"metadata":{"state":"resolved","checkedAt":"2026-11-11T16:56:07.984Z","publishedAt":"2024-11-18T18:29:16Z","deprecated":false,"deprecatedReason":null,"licenses":["Apache-2.0"],"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"links":[{"label":"HOMEPAGE","url":"https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-api"},{"label":"SOURCE_REPO","url":"https://github.com/open-telemetry/opentelemetry-python"}],"relatedProjects":[{"id":"github.com/open-telemetry/opentelemetry-python","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.34.1","repositoryCount":1,"occurrenceCount":1,"ageDays":519,"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"metadata":{"state":"resolved","checkedAt":"2026-11-11T16:56:07.984Z","publishedAt":"2025-06-10T08:54:56Z","deprecated":false,"deprecatedReason":null,"licenses":["Apache-2.0"],"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"links":[{"label":"HOMEPAGE","url":"https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-api"},{"label":"SOURCE_REPO","url":"https://github.com/open-telemetry/opentelemetry-python"}],"relatedProjects":[{"id":"github.com/open-telemetry/opentelemetry-python","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.36.0","repositoryCount":1,"occurrenceCount":1,"ageDays":470,"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"metadata":{"state":"resolved","checkedAt":"2026-11-11T16:56:07.984Z","publishedAt":"2025-07-29T15:11:47Z","deprecated":false,"deprecatedReason":null,"licenses":["Apache-2.0"],"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/open-telemetry/opentelemetry-python"},{"label":"HOMEPAGE","url":"https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-api"}],"relatedProjects":[{"id":"github.com/open-telemetry/opentelemetry-python","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.39.1","repositoryCount":1,"occurrenceCount":1,"ageDays":335,"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"metadata":{"state":"resolved","checkedAt":"2026-11-11T16:56:07.984Z","publishedAt":"2025-12-11T13:32:17Z","deprecated":false,"deprecatedReason":null,"licenses":["Apache-2.0"],"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"links":[{"label":"HOMEPAGE","url":"https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-api"},{"label":"SOURCE_REPO","url":"https://github.com/open-telemetry/opentelemetry-python"}],"relatedProjects":[{"id":"github.com/open-telemetry/opentelemetry-python","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.43.0","repositoryCount":1,"occurrenceCount":1,"ageDays":140,"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"metadata":{"state":"resolved","checkedAt":"2026-11-11T16:56:07.984Z","publishedAt":"2026-06-24T15:19:35Z","deprecated":false,"deprecatedReason":null,"licenses":["Apache-2.0"],"advisoryIds":["GHSA-xcq7-p3pf-p88h"],"links":[{"label":"HOMEPAGE","url":"https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-api"},{"label":"SOURCE_REPO","url":"https://github.com/open-telemetry/opentelemetry-python"}],"relatedProjects":[{"id":"github.com/open-telemetry/opentelemetry-python","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.45.1","repositoryCount":2,"occurrenceCount":4,"ageDays":36,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-11-11T16:56:07.984Z","publishedAt":"2026-10-06T17:32:33Z","deprecated":false,"deprecatedReason":null,"licenses":["Apache-2.0"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-api"},{"label":"SOURCE_REPO","url":"https://github.com/open-telemetry/opentelemetry-python"}],"relatedProjects":[{"id":"github.com/open-telemetry/opentelemetry-python","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.45.2","repositoryCount":3,"occurrenceCount":3,"ageDays":13,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-11-11T16:56:07.984Z","publishedAt":"2026-10-29T17:29:06Z","deprecated":false,"deprecatedReason":null,"licenses":["Apache-2.0"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-api"},{"label":"SOURCE_REPO","url":"https://github.com/open-telemetry/opentelemetry-python"}],"relatedProjects":[{"id":"github.com/open-telemetry/opentelemetry-python","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:1ae1832fd424c142fe667a16","repositoryId":"opencode:11084","repositorySlug":"opencode-11084","repositoryName":"Agent","repositoryPathWithNamespace":"f13/microservices/agentic-orchestrator","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.45.2","versionKey":"pypi:opentelemetry-api@1.45.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"7df7bcee12ed9de9f9c40d32de4f8ddf38cb35ec","sourceUrl":"https://gitlab.opencode.de/f13/microservices/agentic-orchestrator/-/blob/9f4b52646b4c7b165ec9ac9b07075080d50ea705/uv.lock","commitSha":"9f4b52646b4c7b165ec9ac9b07075080d50ea705"},{"id":"component:d4187325e88575189c18dd8d","repositoryId":"opencode:9852","repositorySlug":"opencode-9852","repositoryName":"Datastore","repositoryPathWithNamespace":"f13/microservices/datastore","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.45.2","versionKey":"pypi:opentelemetry-api@1.45.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"2b94fc7540a23612e0995cb674b69817089ac863","sourceUrl":"https://gitlab.opencode.de/f13/microservices/datastore/-/blob/1d3e1d16aaf5a87403506d477fd7d26641190521/uv.lock","commitSha":"1d3e1d16aaf5a87403506d477fd7d26641190521"},{"id":"component:0557a6e05e66f13cba6bc927","repositoryId":"opencode:5530","repositorySlug":"opencode-5530","repositoryName":"GSA Extraction","repositoryPathWithNamespace":"uba-ki-lab/gsa-extraction","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.34.1","versionKey":"pypi:opentelemetry-api@1.34.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"fbb23733e647554b5678500b3f17f13bac7f77f5","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/gsa-extraction/-/blob/f5161e79d3f8c53877f9b1b0d72e1c10bff775ba/uv.lock","commitSha":"f5161e79d3f8c53877f9b1b0d72e1c10bff775ba"},{"id":"component:3e8862b43723fb432e193a9f","repositoryId":"opencode:7781","repositorySlug":"opencode-7781","repositoryName":"kiva-llm-gateway","repositoryPathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.25.0","versionKey":"pypi:opentelemetry-api@1.25.0","direct":null,"development":true,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"48f984e4d97ce607df0ee30b09a8e1e4c935e9db","sourceUrl":"https://gitlab.opencode.de/baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway/-/blob/4a5cd798be9b97cc1bff7b30d930eafda774e380/poetry.lock","commitSha":"4a5cd798be9b97cc1bff7b30d930eafda774e380"},{"id":"component:6642bf08b343e7657456a9b3","repositoryId":"opencode:10787","repositorySlug":"opencode-10787","repositoryName":"LLM Questionnaire Benchmarking Framework","repositoryPathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.36.0","versionKey":"pypi:opentelemetry-api@1.36.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b55661fee93d4733461df8e9c2b491b9205aac2","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-questionnaire-benchmarking-framework/-/blob/4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd/uv.lock","commitSha":"4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd"},{"id":"component:99611b40687cffbdb61d0aa1","repositoryId":"opencode:12239","repositorySlug":"opencode-12239","repositoryName":"LLM Service","repositoryPathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.28.2","versionKey":"pypi:opentelemetry-api@1.28.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"5c34ec93b8f084fb238b9dfb84642a3091538e9d","sourceUrl":"https://gitlab.opencode.de/sh/diwish/splitbot/kosmo/llm-service/-/blob/318cda8c49da743f2c4a18a4f4d5c36fc22102fc/uv.lock","commitSha":"318cda8c49da743f2c4a18a4f4d5c36fc22102fc"},{"id":"component:a667344f9563a34a4cea9f6a","repositoryId":"opencode:5012","repositorySlug":"opencode-5012","repositoryName":"LLM Testframework","repositoryPathWithNamespace":"uba-ki-lab/llm-testframework","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.26.0","versionKey":"pypi:opentelemetry-api@1.26.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"b4c29eab16a40db016821e4ea567956048a046ea","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-testframework/-/blob/e8d6e99a1fa63b264e727acb553ed9b1499789b1/uv.lock","commitSha":"e8d6e99a1fa63b264e727acb553ed9b1499789b1"},{"id":"component:5fac999a8d5df733572050f0","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.45.1","versionKey":"pypi:opentelemetry-api@1.45.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-assistant-service/uv.lock","blobSha":"a0d2b11bf99f3680c63c22f54d3d3627f5ca10e2","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/12fe671bc7f2091b052c38ca91349228038b9ce0/mucgpt-assistant-service/uv.lock","commitSha":"12fe671bc7f2091b052c38ca91349228038b9ce0"},{"id":"component:47b1d1824977e0d4db47118c","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.45.1","versionKey":"pypi:opentelemetry-api@1.45.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-core-service/uv.lock","blobSha":"fd88786e109fa17c3ccfc1c94f3d187285489ecb","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/12fe671bc7f2091b052c38ca91349228038b9ce0/mucgpt-core-service/uv.lock","commitSha":"12fe671bc7f2091b052c38ca91349228038b9ce0"},{"id":"component:2e4eb2494347a33fb9f77a4a","repositoryId":"opencode:5710","repositorySlug":"opencode-5710","repositoryName":"RAG","repositoryPathWithNamespace":"f13/microservices/rag","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.45.2","versionKey":"pypi:opentelemetry-api@1.45.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"c346e9c847cccca53b6f80aba01af5f29b5ec5ed","sourceUrl":"https://gitlab.opencode.de/f13/microservices/rag/-/blob/bf14846ccf85222c95a940fc5cbfed356e899ab4/uv.lock","commitSha":"bf14846ccf85222c95a940fc5cbfed356e899ab4"},{"id":"component:31c5e2b17a37655c87c30206","repositoryId":"opencode:10775","repositorySlug":"opencode-10775","repositoryName":"Ressource Efficient Computer Vision","repositoryPathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.39.1","versionKey":"pypi:opentelemetry-api@1.39.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"047f47304acd18a48770c101f5a8383cd19bb134","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/ressource-efficient-computer-vision/-/blob/9aa07461b879a6161b7e901ea4c2a382b8f1b4ae/uv.lock","commitSha":"9aa07461b879a6161b7e901ea4c2a382b8f1b4ae"},{"id":"component:fe96a6d2719ce48db2797a6b","repositoryId":"opencode:11332","repositorySlug":"opencode-11332","repositoryName":"sprachbuchung-erzmobil","repositoryPathWithNamespace":"erzmobil/ai-voicebot/sprachbuchung-erzmobil","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.45.1","versionKey":"pypi:opentelemetry-api@1.45.1","direct":false,"development":null,"sourceKind":"cyclonedx-json","filePath":"sbom.cdx.json","blobSha":"3349aa5ad7f9ceb0d1bae546f292be001343662a","sourceUrl":"https://gitlab.opencode.de/erzmobil/ai-voicebot/sprachbuchung-erzmobil/-/blob/b89e10e2d7dc3fe7766c171353dd4e15df8f3e07/sbom.cdx.json","commitSha":"b89e10e2d7dc3fe7766c171353dd4e15df8f3e07"},{"id":"component:876e646464c59eb27244be23","repositoryId":"opencode:11332","repositorySlug":"opencode-11332","repositoryName":"sprachbuchung-erzmobil","repositoryPathWithNamespace":"erzmobil/ai-voicebot/sprachbuchung-erzmobil","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.45.1","versionKey":"pypi:opentelemetry-api@1.45.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"d586704dfa97d255af772ed32d3278fe3ecd5c3b","sourceUrl":"https://gitlab.opencode.de/erzmobil/ai-voicebot/sprachbuchung-erzmobil/-/blob/b89e10e2d7dc3fe7766c171353dd4e15df8f3e07/uv.lock","commitSha":"b89e10e2d7dc3fe7766c171353dd4e15df8f3e07"},{"id":"component:770de9848459f302916f4bd9","repositoryId":"opencode:13669","repositorySlug":"opencode-13669","repositoryName":"sprache2text+meer - Transkription für Jugendamt Verwaltung","repositoryPathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/aTrain","ecosystem":"pypi","name":"opentelemetry-api","identity":"pypi:opentelemetry-api","version":"1.43.0","versionKey":"pypi:opentelemetry-api@1.43.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"947a2c691d6f8be1e34d18f292b8c5f0fbc5ac95","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/aTrain/-/blob/b7e00d45e2847bc5089719cb636f5d2215ba9734/uv.lock","commitSha":"b7e00d45e2847bc5089719cb636f5d2215ba9734"}],"occurrenceCount":14},"related":{"repositories":[{"id":"opencode:11332","slug":"opencode-11332","name":"sprachbuchung-erzmobil","pathWithNamespace":"erzmobil/ai-voicebot/sprachbuchung-erzmobil","versions":["1.45.1"],"evidenceCount":2},{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["1.45.1"],"evidenceCount":2},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["1.25.0"],"evidenceCount":1},{"id":"opencode:11084","slug":"opencode-11084","name":"Agent","pathWithNamespace":"f13/microservices/agentic-orchestrator","versions":["1.45.2"],"evidenceCount":1},{"id":"opencode:9852","slug":"opencode-9852","name":"Datastore","pathWithNamespace":"f13/microservices/datastore","versions":["1.45.2"],"evidenceCount":1},{"id":"opencode:5710","slug":"opencode-5710","name":"RAG","pathWithNamespace":"f13/microservices/rag","versions":["1.45.2"],"evidenceCount":1},{"id":"opencode:13669","slug":"opencode-13669","name":"sprache2text+meer - Transkription für Jugendamt Verwaltung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/aTrain","versions":["1.43.0"],"evidenceCount":1},{"id":"opencode:12239","slug":"opencode-12239","name":"LLM Service","pathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","versions":["1.28.2"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["1.34.1"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["1.36.0"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["1.26.0"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["1.39.1"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-xcq7-p3pf-p88h","slug":"ghsa-xcq7-p3pf-p88h-7e00dc8e","dossier":false,"summary":"OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api","aliases":["CVE-2026-114603"],"sourceIds":["GHSA-xcq7-p3pf-p88h"],"published":"2026-10-22T16:22:07Z","modified":"2026-10-22T16:30:40.999595074Z","checkedAt":"2026-11-11T20:28:46.485Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"WEB","url":"https://github.com/open-telemetry/opentelemetry-python/security/advisories/GHSA-xcq7-p3pf-p88h"},{"type":"WEB","url":"https://github.com/open-telemetry/opentelemetry-python/pull/5749"},{"type":"WEB","url":"https://github.com/open-telemetry/opentelemetry-python/commit/d5224bf4ffdf2aee1b592ad238dcc32ca957f26b"},{"type":"PACKAGE","url":"https://github.com/open-telemetry/opentelemetry-python"},{"type":"WEB","url":"https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md#version-1451066b1-2026-10-06"},{"type":"WEB","url":"https://github.com/open-telemetry/opentelemetry-python/releases/tag/v1.45.1"}],"versionKeys":["pypi:opentelemetry-api@1.25.0","pypi:opentelemetry-api@1.26.0","pypi:opentelemetry-api@1.28.2","pypi:opentelemetry-api@1.34.1","pypi:opentelemetry-api@1.36.0","pypi:opentelemetry-api@1.39.1","pypi:opentelemetry-api@1.43.0"],"packageCount":1,"repositoryCount":7}]}}