{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-07-20T14:37:29.537Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-07-20T14:36:19.763Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":30,"completeTreeCount":29,"incompleteTreeCount":1,"lockfileRepositoryCount":17,"sbomRepositoryCount":4,"artifactRepositoryCount":20,"resolvedRepositoryCount":29,"resolvedArtifactRepositoryCount":20,"dependencyFileCount":33,"parsedFileCount":32,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4205,"metadataResolvedCount":4191,"metadataNotFoundCount":14,"osvEvaluatedVersionCount":4205,"codeRadarRepositoryCount":30},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":5000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":30,"packageCount":2831,"aiPackageCount":41,"resolvedComponentCount":7181,"resolvedVersionCount":4205,"providerExposureRepositoryCount":7,"licenseExpressionCount":57,"knownLicensePackageCount":2796,"unknownLicensePackageCount":35,"advisoryCount":572,"matchedAdvisoryRepositoryCount":25,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":18,"repositoryShare":0.6}},"kind":"paket","entity":{"id":"package:pypi:pytest","slug":"pytest-07c6f86c","identity":"pypi:pytest","ecosystem":"pypi","name":"pytest","label":"pytest","category":null,"aiRelevant":false,"provider":null,"repositoryCount":7,"occurrenceCount":9,"directRepositoryCount":0,"versionCount":5,"licenseExpressions":["MIT"],"advisoryIds":["GHSA-6w46-j5rx-g56g"],"advisoryCount":1,"verifiedAttestation":true,"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["9.0.3"],"evidenceCount":2},{"id":"opencode:5142","slug":"opencode-5142","name":"strahlenexposition","pathWithNamespace":"uba-ki-lab/strahlenexposition","versions":["7.4.4"],"evidenceCount":2},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["7.4.4"],"evidenceCount":1},{"id":"opencode:3608","slug":"opencode-3608","name":"AI","pathWithNamespace":"iqsh/collaboration-online-board/ai","versions":["7.2.2"],"evidenceCount":1},{"id":"opencode:10162","slug":"opencode-10162","name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","versions":["8.3.2"],"evidenceCount":1},{"id":"opencode:9998","slug":"opencode-9998","name":"density-maps","pathWithNamespace":"uba-ki-lab/density-maps","versions":["9.0.2"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["9.0.2"],"evidenceCount":1}],"versions":[{"version":"7.2.2","repositoryCount":1,"occurrenceCount":1,"ageDays":1234,"advisoryIds":["GHSA-6w46-j5rx-g56g"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2023-03-03T19:12:27Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-6w46-j5rx-g56g","PYSEC-2026-1845"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/pytest-dev/pytest"}],"relatedProjects":[{"id":"github.com/pytest-dev/pytest","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"7.4.4","repositoryCount":2,"occurrenceCount":3,"ageDays":932,"advisoryIds":["GHSA-6w46-j5rx-g56g"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2023-12-31T12:00:13Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-6w46-j5rx-g56g","PYSEC-2026-1845"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/pytest-dev/pytest"}],"relatedProjects":[{"id":"github.com/pytest-dev/pytest","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"8.3.2","repositoryCount":1,"occurrenceCount":1,"ageDays":725,"advisoryIds":["GHSA-6w46-j5rx-g56g"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2024-07-25T10:39:57Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-6w46-j5rx-g56g","PYSEC-2026-1845"],"links":[{"label":"HOMEPAGE","url":"https://docs.pytest.org/en/latest/"},{"label":"SOURCE_REPO","url":"https://github.com/pytest-dev/pytest"}],"relatedProjects":[{"id":"github.com/pytest-dev/pytest","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"9.0.2","repositoryCount":2,"occurrenceCount":2,"ageDays":225,"advisoryIds":["GHSA-6w46-j5rx-g56g"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-12-06T21:30:49Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-6w46-j5rx-g56g","PYSEC-2026-1845"],"links":[{"label":"HOMEPAGE","url":"https://docs.pytest.org/en/latest/"},{"label":"SOURCE_REPO","url":"https://github.com/pytest-dev/pytest"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/pytest/9.0.2/pytest-9.0.2-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/pytest-dev/pytest","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pytest-dev/pytest","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/pytest/9.0.2/pytest-9.0.2-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/pytest-dev/pytest","commit":"3d10b5148e03eb82b3ee29181dbdc73cf82699e2"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"9.0.3","repositoryCount":1,"occurrenceCount":2,"ageDays":103,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-04-07T17:16:16Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"SOURCE_REPO","url":"https://github.com/pytest-dev/pytest"},{"label":"HOMEPAGE","url":"https://docs.pytest.org/en/latest/"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/pytest/9.0.3/pytest-9.0.3-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/pytest-dev/pytest","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pytest-dev/pytest","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/pytest/9.0.3/pytest-9.0.3-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/pytest-dev/pytest","commit":"a7d58d7a21b78581e636bbbdea13c66ad1657c1e"}],"verifiedAttestation":true,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:b4fc9920e0dc6c65fde3bb58","repositoryId":"opencode:3608","repositorySlug":"opencode-3608","repositoryName":"AI","repositoryPathWithNamespace":"iqsh/collaboration-online-board/ai","ecosystem":"pypi","name":"pytest","identity":"pypi:pytest","version":"7.2.2","versionKey":"pypi:pytest@7.2.2","direct":null,"development":null,"sourceKind":"spdx-yaml","filePath":"SPDX_v2.0.0.yml","blobSha":"e9e46566a2217346214d08f9dede99d8821b3c68","sourceUrl":"https://gitlab.opencode.de/iqsh/collaboration-online-board/ai/-/blob/7cc4cbe5064bc5ede2426caf6981c5e9d0509327/SPDX_v2.0.0.yml","commitSha":"7cc4cbe5064bc5ede2426caf6981c5e9d0509327"},{"id":"component:81c2bed83ab219450a6c0665","repositoryId":"opencode:9998","repositorySlug":"opencode-9998","repositoryName":"density-maps","repositoryPathWithNamespace":"uba-ki-lab/density-maps","ecosystem":"pypi","name":"pytest","identity":"pypi:pytest","version":"9.0.2","versionKey":"pypi:pytest@9.0.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"fa64e230fe01c25e6d465e090acbed3d4d86a694","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/density-maps/-/blob/1da30304236d86dfb376a429b1ea6e9fddba3a0a/uv.lock","commitSha":"1da30304236d86dfb376a429b1ea6e9fddba3a0a"},{"id":"component:c165fbd2f23eb2837e9844f3","repositoryId":"opencode:7781","repositorySlug":"opencode-7781","repositoryName":"kiva-llm-gateway","repositoryPathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","ecosystem":"pypi","name":"pytest","identity":"pypi:pytest","version":"7.4.4","versionKey":"pypi:pytest@7.4.4","direct":null,"development":true,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"48f984e4d97ce607df0ee30b09a8e1e4c935e9db","sourceUrl":"https://gitlab.opencode.de/baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway/-/blob/4a5cd798be9b97cc1bff7b30d930eafda774e380/poetry.lock","commitSha":"4a5cd798be9b97cc1bff7b30d930eafda774e380"},{"id":"component:039233d5426df4fcddd00adc","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"pytest","identity":"pypi:pytest","version":"9.0.3","versionKey":"pypi:pytest@9.0.3","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-assistant-service/uv.lock","blobSha":"36b26ae58598809148cf87cffcc3b67380e8b928","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/mucgpt-assistant-service/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"},{"id":"component:e777d0f55479ef98f3953c18","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"pytest","identity":"pypi:pytest","version":"9.0.3","versionKey":"pypi:pytest@9.0.3","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-core-service/uv.lock","blobSha":"8bf6980137a09f5692c9e62798298a2cd9122a99","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/mucgpt-core-service/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"},{"id":"component:4ef565d1944d8263fc80d576","repositoryId":"opencode:10775","repositorySlug":"opencode-10775","repositoryName":"Ressource Efficient Computer Vision","repositoryPathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","ecosystem":"pypi","name":"pytest","identity":"pypi:pytest","version":"9.0.2","versionKey":"pypi:pytest@9.0.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"047f47304acd18a48770c101f5a8383cd19bb134","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/ressource-efficient-computer-vision/-/blob/9aa07461b879a6161b7e901ea4c2a382b8f1b4ae/uv.lock","commitSha":"9aa07461b879a6161b7e901ea4c2a382b8f1b4ae"},{"id":"component:522dccf0ef5c322352396618","repositoryId":"opencode:10162","repositorySlug":"opencode-10162","repositoryName":"SmartPlanAI Anwendung","repositoryPathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","ecosystem":"pypi","name":"pytest","identity":"pypi:pytest","version":"8.3.2","versionKey":"pypi:pytest@8.3.2","direct":null,"development":true,"sourceKind":"poetry-lock","filePath":"blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","blobSha":"40fa29ec0b8e6e3bfbf4c2ff77526dd4038e0299","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f"},{"id":"component:3b6c8bb0b4459313dfceb56e","repositoryId":"opencode:5142","repositorySlug":"opencode-5142","repositoryName":"strahlenexposition","repositoryPathWithNamespace":"uba-ki-lab/strahlenexposition","ecosystem":"pypi","name":"pytest","identity":"pypi:pytest","version":"7.4.4","versionKey":"pypi:pytest@7.4.4","direct":null,"development":true,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"681193f56a8b37b97336b2682fc1147ac3bdab1f","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/strahlenexposition/-/blob/1dd9cd8ca823a7998b729adce6957848cf241d54/poetry.lock","commitSha":"1dd9cd8ca823a7998b729adce6957848cf241d54"},{"id":"component:23fa5433cd1cba27328df28e","repositoryId":"opencode:5142","repositorySlug":"opencode-5142","repositoryName":"strahlenexposition","repositoryPathWithNamespace":"uba-ki-lab/strahlenexposition","ecosystem":"pypi","name":"pytest","identity":"pypi:pytest","version":"7.4.4","versionKey":"pypi:pytest@7.4.4","direct":null,"development":null,"sourceKind":"sbom-json","filePath":"sbom.json","blobSha":"bce3149701e5462f1af80e9221c0e2967402d606","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/strahlenexposition/-/blob/1dd9cd8ca823a7998b729adce6957848cf241d54/sbom.json","commitSha":"1dd9cd8ca823a7998b729adce6957848cf241d54"}],"occurrenceCount":9},"related":{"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["9.0.3"],"evidenceCount":2},{"id":"opencode:5142","slug":"opencode-5142","name":"strahlenexposition","pathWithNamespace":"uba-ki-lab/strahlenexposition","versions":["7.4.4"],"evidenceCount":2},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["7.4.4"],"evidenceCount":1},{"id":"opencode:3608","slug":"opencode-3608","name":"AI","pathWithNamespace":"iqsh/collaboration-online-board/ai","versions":["7.2.2"],"evidenceCount":1},{"id":"opencode:10162","slug":"opencode-10162","name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","versions":["8.3.2"],"evidenceCount":1},{"id":"opencode:9998","slug":"opencode-9998","name":"density-maps","pathWithNamespace":"uba-ki-lab/density-maps","versions":["9.0.2"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["9.0.2"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-6w46-j5rx-g56g","slug":"ghsa-6w46-j5rx-g56g-5324d549","dossier":false,"summary":"pytest has vulnerable tmpdir handling","aliases":["CVE-2025-71176","PYSEC-2026-1845"],"sourceIds":["GHSA-6w46-j5rx-g56g","PYSEC-2026-1845"],"published":"2026-01-22T06:30:29Z","modified":"2026-07-07T17:56:26.471696626Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71176"},{"type":"WEB","url":"https://github.com/pytest-dev/pytest/issues/13669"},{"type":"WEB","url":"https://github.com/pytest-dev/pytest/pull/14343"},{"type":"WEB","url":"https://github.com/pytest-dev/pytest/commit/95d8423bd24992deea5b9df32555fa1741679e2c"},{"type":"PACKAGE","url":"https://github.com/pytest-dev/pytes"},{"type":"WEB","url":"https://github.com/pytest-dev/pytest/releases/tag/9.0.3"},{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2026/01/21/5"},{"type":"PACKAGE","url":"https://pypi.org/project/pytest"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-6w46-j5rx-g56g"}],"versionKeys":["pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@9.0.2"],"packageCount":1,"repositoryCount":6}]}}