{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-07-29T15:33:06.653Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-07-29T15:29:29.996Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":30,"completeTreeCount":29,"incompleteTreeCount":1,"lockfileRepositoryCount":17,"sbomRepositoryCount":4,"artifactRepositoryCount":20,"resolvedRepositoryCount":29,"resolvedArtifactRepositoryCount":20,"dependencyFileCount":31,"parsedFileCount":30,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":3452,"metadataResolvedCount":3442,"metadataNotFoundCount":10,"osvEvaluatedVersionCount":3452,"codeRadarRepositoryCount":30},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":8000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":30,"packageCount":2203,"aiPackageCount":40,"resolvedComponentCount":5691,"resolvedVersionCount":3452,"providerExposureRepositoryCount":6,"licenseExpressionCount":52,"knownLicensePackageCount":2174,"unknownLicensePackageCount":29,"advisoryCount":591,"matchedAdvisoryRepositoryCount":25,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":18,"repositoryShare":0.6}},"kind":"paket","entity":{"id":"package:pypi:pydantic-settings","slug":"pydantic-settings-d677745f","identity":"pypi:pydantic-settings","ecosystem":"pypi","name":"pydantic-settings","label":"pydantic-settings","category":null,"aiRelevant":false,"provider":null,"repositoryCount":5,"occurrenceCount":7,"directRepositoryCount":0,"versionCount":3,"licenseExpressions":["MIT"],"advisoryIds":["GHSA-4xgf-cpjx-pc3j"],"advisoryCount":1,"verifiedAttestation":true,"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["2.14.2"],"evidenceCount":3},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["2.10.1"],"evidenceCount":1},{"id":"opencode:8742","slug":"opencode-8742","name":"ai-websearch-benchmark","pathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","versions":["2.12.0"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["2.10.1"],"evidenceCount":1},{"id":"opencode:7811","slug":"opencode-7811","name":"Retrieval Evaluation","pathWithNamespace":"uba-ki-lab/retrieval-evaluation","versions":["2.12.0"],"evidenceCount":1}],"versions":[{"version":"2.10.1","repositoryCount":2,"occurrenceCount":2,"ageDays":400,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-29T02:29:20.777Z","publishedAt":"2025-06-24T13:26:45Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://github.com/pydantic/pydantic-settings"},{"label":"DOCUMENTATION","url":"https://docs.pydantic.dev/dev-v2/concepts/pydantic_settings/"},{"label":"SOURCE_REPO","url":"https://github.com/pydantic/pydantic-settings"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/pydantic-settings/2.10.1/pydantic_settings-2.10.1-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/pydantic/pydantic-settings","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pydantic/pydantic-settings","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/pydantic-settings/2.10.1/pydantic_settings-2.10.1-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/pydantic/pydantic-settings","commit":"6bae3ab4fb321434feca35d120f05509d5c4ac55"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"2.12.0","repositoryCount":2,"occurrenceCount":2,"ageDays":261,"advisoryIds":["GHSA-4xgf-cpjx-pc3j"],"metadata":{"state":"resolved","checkedAt":"2026-07-29T02:29:20.777Z","publishedAt":"2025-11-10T14:25:45Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-4xgf-cpjx-pc3j"],"links":[{"label":"HOMEPAGE","url":"https://github.com/pydantic/pydantic-settings"},{"label":"DOCUMENTATION","url":"https://docs.pydantic.dev/dev-v2/concepts/pydantic_settings/"},{"label":"SOURCE_REPO","url":"https://github.com/pydantic/pydantic-settings"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/pydantic-settings/2.12.0/pydantic_settings-2.12.0-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/pydantic/pydantic-settings","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pydantic/pydantic-settings","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/pydantic-settings/2.12.0/pydantic_settings-2.12.0-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/pydantic/pydantic-settings","commit":"584983d253a0fac4dfb294d1e6f9ef188add468b"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"2.14.2","repositoryCount":1,"occurrenceCount":3,"ageDays":40,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-29T02:29:20.777Z","publishedAt":"2026-06-19T13:44:55Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://github.com/pydantic/pydantic-settings"},{"label":"DOCUMENTATION","url":"https://docs.pydantic.dev/dev-v2/concepts/pydantic_settings/"},{"label":"SOURCE_REPO","url":"https://github.com/pydantic/pydantic-settings"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/pydantic-settings/2.14.2/pydantic_settings-2.14.2-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/pydantic/pydantic-settings","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pydantic/pydantic-settings","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/pydantic-settings/2.14.2/pydantic_settings-2.14.2-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/pydantic/pydantic-settings","commit":"d703bd717e5e07439fa89da2245eee6139413e9e"}],"verifiedAttestation":true,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:7a502e4e2952bebb76fe1377","repositoryId":"opencode:8742","repositorySlug":"opencode-8742","repositoryName":"ai-websearch-benchmark","repositoryPathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","ecosystem":"pypi","name":"pydantic-settings","identity":"pypi:pydantic-settings","version":"2.12.0","versionKey":"pypi:pydantic-settings@2.12.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"4f7b4e2e096e186e4408b529568676aa8c71ba55","sourceUrl":"https://gitlab.opencode.de/datenlabor-bmz/ai-websearch-benchmark/-/blob/cd6b854b1b400d7e45796aaa22bded8183642916/uv.lock","commitSha":"cd6b854b1b400d7e45796aaa22bded8183642916"},{"id":"component:4eae451019aff5aa4e0ec40f","repositoryId":"opencode:7781","repositorySlug":"opencode-7781","repositoryName":"kiva-llm-gateway","repositoryPathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","ecosystem":"pypi","name":"pydantic-settings","identity":"pypi:pydantic-settings","version":"2.10.1","versionKey":"pypi:pydantic-settings@2.10.1","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"48f984e4d97ce607df0ee30b09a8e1e4c935e9db","sourceUrl":"https://gitlab.opencode.de/baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway/-/blob/4a5cd798be9b97cc1bff7b30d930eafda774e380/poetry.lock","commitSha":"4a5cd798be9b97cc1bff7b30d930eafda774e380"},{"id":"component:73a9aaa9d45b52841bcf217b","repositoryId":"opencode:10787","repositorySlug":"opencode-10787","repositoryName":"LLM Questionnaire Benchmarking Framework","repositoryPathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","ecosystem":"pypi","name":"pydantic-settings","identity":"pypi:pydantic-settings","version":"2.10.1","versionKey":"pypi:pydantic-settings@2.10.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b55661fee93d4733461df8e9c2b491b9205aac2","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-questionnaire-benchmarking-framework/-/blob/4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd/uv.lock","commitSha":"4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd"},{"id":"component:10fc990fc4d89bf4418ea538","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"pydantic-settings","identity":"pypi:pydantic-settings","version":"2.14.2","versionKey":"pypi:pydantic-settings@2.14.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-assistant-service-migrations/uv.lock","blobSha":"3a5359c8b1106f9e3c8ced27e857ac50de3faef1","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/4d053562adec8962a8e523b7ed27b48a9f882d60/mucgpt-assistant-service-migrations/uv.lock","commitSha":"4d053562adec8962a8e523b7ed27b48a9f882d60"},{"id":"component:09aa907dbc0c82eca5fc69b2","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"pydantic-settings","identity":"pypi:pydantic-settings","version":"2.14.2","versionKey":"pypi:pydantic-settings@2.14.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-assistant-service/uv.lock","blobSha":"36b26ae58598809148cf87cffcc3b67380e8b928","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/4d053562adec8962a8e523b7ed27b48a9f882d60/mucgpt-assistant-service/uv.lock","commitSha":"4d053562adec8962a8e523b7ed27b48a9f882d60"},{"id":"component:e9b18b0a534d9d23b9b05f10","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"pydantic-settings","identity":"pypi:pydantic-settings","version":"2.14.2","versionKey":"pypi:pydantic-settings@2.14.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-core-service/uv.lock","blobSha":"8bf6980137a09f5692c9e62798298a2cd9122a99","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/4d053562adec8962a8e523b7ed27b48a9f882d60/mucgpt-core-service/uv.lock","commitSha":"4d053562adec8962a8e523b7ed27b48a9f882d60"},{"id":"component:276cf581377f4eb1fcc6cc89","repositoryId":"opencode:7811","repositorySlug":"opencode-7811","repositoryName":"Retrieval Evaluation","repositoryPathWithNamespace":"uba-ki-lab/retrieval-evaluation","ecosystem":"pypi","name":"pydantic-settings","identity":"pypi:pydantic-settings","version":"2.12.0","versionKey":"pypi:pydantic-settings@2.12.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"20c0181bf785c3e980512ba2de16e0fe3f207bad","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/retrieval-evaluation/-/blob/f64bf528432908908d92b8263d6933301033bb7f/uv.lock","commitSha":"f64bf528432908908d92b8263d6933301033bb7f"}],"occurrenceCount":7},"related":{"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["2.14.2"],"evidenceCount":3},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["2.10.1"],"evidenceCount":1},{"id":"opencode:8742","slug":"opencode-8742","name":"ai-websearch-benchmark","pathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","versions":["2.12.0"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["2.10.1"],"evidenceCount":1},{"id":"opencode:7811","slug":"opencode-7811","name":"Retrieval Evaluation","pathWithNamespace":"uba-ki-lab/retrieval-evaluation","versions":["2.12.0"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-4xgf-cpjx-pc3j","slug":"ghsa-4xgf-cpjx-pc3j-c1284f87","dossier":false,"summary":"pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size","aliases":["CVE-2026-58203"],"sourceIds":["GHSA-4xgf-cpjx-pc3j"],"published":"2026-06-19T22:10:42Z","modified":"2026-07-08T08:12:48.604645024Z","checkedAt":"2026-07-29T15:33:06.653Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"}],"references":[{"type":"WEB","url":"https://github.com/pydantic/pydantic-settings/security/advisories/GHSA-4xgf-cpjx-pc3j"},{"type":"PACKAGE","url":"https://github.com/pydantic/pydantic-settings"}],"versionKeys":["pypi:pydantic-settings@2.12.0"],"packageCount":1,"repositoryCount":2}]}}