{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-07-20T14:37:29.537Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-07-20T14:36:19.763Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":30,"completeTreeCount":29,"incompleteTreeCount":1,"lockfileRepositoryCount":17,"sbomRepositoryCount":4,"artifactRepositoryCount":20,"resolvedRepositoryCount":29,"resolvedArtifactRepositoryCount":20,"dependencyFileCount":33,"parsedFileCount":32,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4205,"metadataResolvedCount":4191,"metadataNotFoundCount":14,"osvEvaluatedVersionCount":4205,"codeRadarRepositoryCount":30},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":5000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":30,"packageCount":2831,"aiPackageCount":41,"resolvedComponentCount":7181,"resolvedVersionCount":4205,"providerExposureRepositoryCount":7,"licenseExpressionCount":57,"knownLicensePackageCount":2796,"unknownLicensePackageCount":35,"advisoryCount":572,"matchedAdvisoryRepositoryCount":25,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":18,"repositoryShare":0.6}},"kind":"paket","entity":{"id":"package:pypi:setuptools","slug":"setuptools-fe37c31a","identity":"pypi:setuptools","ecosystem":"pypi","name":"setuptools","label":"setuptools","category":null,"aiRelevant":false,"provider":null,"repositoryCount":13,"occurrenceCount":15,"directRepositoryCount":0,"versionCount":9,"licenseExpressions":["MIT"],"advisoryIds":["GHSA-5rjg-fvgr-3xxf","GHSA-cx63-2mw6-8hw5","PYSEC-2026-3447"],"advisoryCount":3,"verifiedAttestation":false,"repositories":[{"id":"opencode:10162","slug":"opencode-10162","name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","versions":["80.9.0","82.0.1"],"evidenceCount":2},{"id":"opencode:5142","slug":"opencode-5142","name":"strahlenexposition","pathWithNamespace":"uba-ki-lab/strahlenexposition","versions":["80.0.1"],"evidenceCount":2},{"id":"opencode:6174","slug":"opencode-6174","name":"Energieautarkes Wohnquartier - Backend","pathWithNamespace":"energieautarkes-wohnquartier/backend","versions":["80.4.0"],"evidenceCount":1},{"id":"opencode:3608","slug":"opencode-3608","name":"AI","pathWithNamespace":"iqsh/collaboration-online-board/ai","versions":["69.2.0"],"evidenceCount":1},{"id":"opencode:7674","slug":"opencode-7674","name":"Coding Agent Usage Simulation","pathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","versions":["79.0.1"],"evidenceCount":1},{"id":"opencode:9998","slug":"opencode-9998","name":"density-maps","pathWithNamespace":"uba-ki-lab/density-maps","versions":["82.0.1"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["80.9.0"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["79.0.1"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["80.3.1"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["75.8.0"],"evidenceCount":1},{"id":"opencode:5201","slug":"opencode-5201","name":"photovoltaic_systems","pathWithNamespace":"uba-ki-lab/photovoltaic_systems","versions":["80.8.0"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["80.9.0"],"evidenceCount":1},{"id":"opencode:7811","slug":"opencode-7811","name":"Retrieval Evaluation","pathWithNamespace":"uba-ki-lab/retrieval-evaluation","versions":["80.9.0"],"evidenceCount":1}],"versions":[{"version":"69.2.0","repositoryCount":1,"occurrenceCount":1,"ageDays":859,"advisoryIds":["GHSA-5rjg-fvgr-3xxf","GHSA-cx63-2mw6-8hw5","PYSEC-2026-3447"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2024-03-13T11:20:54Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-5rjg-fvgr-3xxf","GHSA-cx63-2mw6-8hw5","PYSEC-2025-49","PYSEC-2026-1918","PYSEC-2026-3447"],"links":[{"label":"DOCUMENTATION","url":"https://setuptools.pypa.io/"},{"label":"SOURCE_REPO","url":"https://github.com/pypa/setuptools"}],"relatedProjects":[{"id":"github.com/pypa/setuptools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"75.8.0","repositoryCount":1,"occurrenceCount":1,"ageDays":557,"advisoryIds":["GHSA-5rjg-fvgr-3xxf","PYSEC-2026-3447"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-01-08T18:28:20Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-5rjg-fvgr-3xxf","PYSEC-2025-49","PYSEC-2026-3447"],"links":[{"label":"DOCUMENTATION","url":"https://setuptools.pypa.io/"},{"label":"SOURCE_REPO","url":"https://github.com/pypa/setuptools"}],"relatedProjects":[{"id":"github.com/pypa/setuptools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"79.0.1","repositoryCount":2,"occurrenceCount":2,"ageDays":452,"advisoryIds":["PYSEC-2026-3447"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-04-23T22:20:56Z","deprecated":false,"deprecatedReason":null,"licenses":[],"advisoryIds":["PYSEC-2026-3447"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/pypa/setuptools"},{"label":"DOCUMENTATION","url":"https://setuptools.pypa.io/"}],"relatedProjects":[{"id":"github.com/pypa/setuptools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"80.0.1","repositoryCount":1,"occurrenceCount":2,"ageDays":446,"advisoryIds":["PYSEC-2026-3447"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-04-30T01:41:09Z","deprecated":false,"deprecatedReason":null,"licenses":[],"advisoryIds":["PYSEC-2026-3447"],"links":[{"label":"DOCUMENTATION","url":"https://setuptools.pypa.io/"},{"label":"SOURCE_REPO","url":"https://github.com/pypa/setuptools"}],"relatedProjects":[{"id":"github.com/pypa/setuptools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"80.3.1","repositoryCount":1,"occurrenceCount":1,"ageDays":441,"advisoryIds":["PYSEC-2026-3447"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-05-04T18:47:02Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["PYSEC-2026-3447"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/pypa/setuptools"},{"label":"DOCUMENTATION","url":"https://setuptools.pypa.io/"}],"relatedProjects":[{"id":"github.com/pypa/setuptools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"80.4.0","repositoryCount":1,"occurrenceCount":1,"ageDays":436,"advisoryIds":["PYSEC-2026-3447"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-05-09T20:42:25Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["PYSEC-2026-3447"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/pypa/setuptools"},{"label":"DOCUMENTATION","url":"https://setuptools.pypa.io/"}],"relatedProjects":[{"id":"github.com/pypa/setuptools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"80.8.0","repositoryCount":1,"occurrenceCount":1,"ageDays":426,"advisoryIds":["PYSEC-2026-3447"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-05-20T14:02:51Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["PYSEC-2026-3447"],"links":[{"label":"DOCUMENTATION","url":"https://setuptools.pypa.io/"},{"label":"SOURCE_REPO","url":"https://github.com/pypa/setuptools"}],"relatedProjects":[{"id":"github.com/pypa/setuptools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"80.9.0","repositoryCount":4,"occurrenceCount":4,"ageDays":419,"advisoryIds":["PYSEC-2026-3447"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-05-27T00:56:49Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["PYSEC-2026-3447"],"links":[{"label":"DOCUMENTATION","url":"https://setuptools.pypa.io/"},{"label":"SOURCE_REPO","url":"https://github.com/pypa/setuptools"}],"relatedProjects":[{"id":"github.com/pypa/setuptools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"82.0.1","repositoryCount":2,"occurrenceCount":2,"ageDays":133,"advisoryIds":["PYSEC-2026-3447"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-03-09T12:47:15Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["PYSEC-2026-3447"],"links":[{"label":"DOCUMENTATION","url":"https://setuptools.pypa.io/"},{"label":"SOURCE_REPO","url":"https://github.com/pypa/setuptools"}],"relatedProjects":[{"id":"github.com/pypa/setuptools","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:da02d606564297d56e420984","repositoryId":"opencode:3608","repositorySlug":"opencode-3608","repositoryName":"AI","repositoryPathWithNamespace":"iqsh/collaboration-online-board/ai","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"69.2.0","versionKey":"pypi:setuptools@69.2.0","direct":null,"development":null,"sourceKind":"spdx-yaml","filePath":"SPDX_v2.0.0.yml","blobSha":"e9e46566a2217346214d08f9dede99d8821b3c68","sourceUrl":"https://gitlab.opencode.de/iqsh/collaboration-online-board/ai/-/blob/7cc4cbe5064bc5ede2426caf6981c5e9d0509327/SPDX_v2.0.0.yml","commitSha":"7cc4cbe5064bc5ede2426caf6981c5e9d0509327"},{"id":"component:982259c55798b0260522e23b","repositoryId":"opencode:7674","repositorySlug":"opencode-7674","repositoryName":"Coding Agent Usage Simulation","repositoryPathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"79.0.1","versionKey":"pypi:setuptools@79.0.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b1464cf01496db34285bf91f7841aed50559816","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/coding-agent-usage-simulation/-/blob/fe8ab81af4926a34c6cf1f3a807ffeda2b398f32/uv.lock","commitSha":"fe8ab81af4926a34c6cf1f3a807ffeda2b398f32"},{"id":"component:089719d557db7b7f139564bd","repositoryId":"opencode:9998","repositorySlug":"opencode-9998","repositoryName":"density-maps","repositoryPathWithNamespace":"uba-ki-lab/density-maps","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"82.0.1","versionKey":"pypi:setuptools@82.0.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"fa64e230fe01c25e6d465e090acbed3d4d86a694","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/density-maps/-/blob/1da30304236d86dfb376a429b1ea6e9fddba3a0a/uv.lock","commitSha":"1da30304236d86dfb376a429b1ea6e9fddba3a0a"},{"id":"component:bd5b9a8d483ceea5ed8b349e","repositoryId":"opencode:6174","repositorySlug":"opencode-6174","repositoryName":"Energieautarkes Wohnquartier - Backend","repositoryPathWithNamespace":"energieautarkes-wohnquartier/backend","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"80.4.0","versionKey":"pypi:setuptools@80.4.0","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"dc5008ef9fba69d70ea9e7b3fea21265fa5ef93d","sourceUrl":"https://gitlab.opencode.de/energieautarkes-wohnquartier/backend/-/blob/fc7e24cd546449ac9fdee4ad78aab861e0c89666/poetry.lock","commitSha":"fc7e24cd546449ac9fdee4ad78aab861e0c89666"},{"id":"component:ce2c1e2bc99563220ca77bb1","repositoryId":"opencode:5530","repositorySlug":"opencode-5530","repositoryName":"GSA Extraction","repositoryPathWithNamespace":"uba-ki-lab/gsa-extraction","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"80.9.0","versionKey":"pypi:setuptools@80.9.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"fbb23733e647554b5678500b3f17f13bac7f77f5","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/gsa-extraction/-/blob/f5161e79d3f8c53877f9b1b0d72e1c10bff775ba/uv.lock","commitSha":"f5161e79d3f8c53877f9b1b0d72e1c10bff775ba"},{"id":"component:cc0743e6684501e7e8d27dd5","repositoryId":"opencode:10787","repositorySlug":"opencode-10787","repositoryName":"LLM Questionnaire Benchmarking Framework","repositoryPathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"79.0.1","versionKey":"pypi:setuptools@79.0.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b55661fee93d4733461df8e9c2b491b9205aac2","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-questionnaire-benchmarking-framework/-/blob/4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd/uv.lock","commitSha":"4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd"},{"id":"component:5cf247059ef975243562fd16","repositoryId":"opencode:5012","repositorySlug":"opencode-5012","repositoryName":"LLM Testframework","repositoryPathWithNamespace":"uba-ki-lab/llm-testframework","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"80.3.1","versionKey":"pypi:setuptools@80.3.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"b4c29eab16a40db016821e4ea567956048a046ea","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-testframework/-/blob/e8d6e99a1fa63b264e727acb553ed9b1499789b1/uv.lock","commitSha":"e8d6e99a1fa63b264e727acb553ed9b1499789b1"},{"id":"component:2c474fd2c179b6fe0e90e302","repositoryId":"opencode:4112","repositorySlug":"opencode-4112","repositoryName":"Objection management","repositoryPathWithNamespace":"uba-ki-lab/objection-management","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"75.8.0","versionKey":"pypi:setuptools@75.8.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"8515db65670904208e99397a2d7878af759c74f3","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/objection-management/-/blob/5c1425bf9990cf12c5ae8ada47d249710703af18/uv.lock","commitSha":"5c1425bf9990cf12c5ae8ada47d249710703af18"},{"id":"component:57453107e5b6b9425535d964","repositoryId":"opencode:5201","repositorySlug":"opencode-5201","repositoryName":"photovoltaic_systems","repositoryPathWithNamespace":"uba-ki-lab/photovoltaic_systems","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"80.8.0","versionKey":"pypi:setuptools@80.8.0","direct":null,"development":null,"sourceKind":"sbom-json","filePath":"sbom.json","blobSha":"90b7d669fbf37c00e7bd5bf4e73a60e7eb78927e","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/photovoltaic_systems/-/blob/d0ec9137f2985f323b9aad141d83c47d14c64cce/sbom.json","commitSha":"d0ec9137f2985f323b9aad141d83c47d14c64cce"},{"id":"component:4d1740f13ba879bfb432903a","repositoryId":"opencode:10775","repositorySlug":"opencode-10775","repositoryName":"Ressource Efficient Computer Vision","repositoryPathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"80.9.0","versionKey":"pypi:setuptools@80.9.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"047f47304acd18a48770c101f5a8383cd19bb134","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/ressource-efficient-computer-vision/-/blob/9aa07461b879a6161b7e901ea4c2a382b8f1b4ae/uv.lock","commitSha":"9aa07461b879a6161b7e901ea4c2a382b8f1b4ae"},{"id":"component:ac1c191c5a103f280020be23","repositoryId":"opencode:7811","repositorySlug":"opencode-7811","repositoryName":"Retrieval Evaluation","repositoryPathWithNamespace":"uba-ki-lab/retrieval-evaluation","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"80.9.0","versionKey":"pypi:setuptools@80.9.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"20c0181bf785c3e980512ba2de16e0fe3f207bad","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/retrieval-evaluation/-/blob/f64bf528432908908d92b8263d6933301033bb7f/uv.lock","commitSha":"f64bf528432908908d92b8263d6933301033bb7f"},{"id":"component:558d7f3b8f49a1ffe11b5898","repositoryId":"opencode:10162","repositorySlug":"opencode-10162","repositoryName":"SmartPlanAI Anwendung","repositoryPathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"80.9.0","versionKey":"pypi:setuptools@80.9.0","direct":null,"development":true,"sourceKind":"poetry-lock","filePath":"blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","blobSha":"40fa29ec0b8e6e3bfbf4c2ff77526dd4038e0299","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f"},{"id":"component:10a1eff4d897d6778270575b","repositoryId":"opencode:10162","repositorySlug":"opencode-10162","repositoryName":"SmartPlanAI Anwendung","repositoryPathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"82.0.1","versionKey":"pypi:setuptools@82.0.1","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"6b17710ca48cf83827a909c320d60853c75d7960","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f"},{"id":"component:1d27536e9aa0023b5534ae37","repositoryId":"opencode:5142","repositorySlug":"opencode-5142","repositoryName":"strahlenexposition","repositoryPathWithNamespace":"uba-ki-lab/strahlenexposition","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"80.0.1","versionKey":"pypi:setuptools@80.0.1","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"681193f56a8b37b97336b2682fc1147ac3bdab1f","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/strahlenexposition/-/blob/1dd9cd8ca823a7998b729adce6957848cf241d54/poetry.lock","commitSha":"1dd9cd8ca823a7998b729adce6957848cf241d54"},{"id":"component:e44db96c7d96bfcbe7d1af82","repositoryId":"opencode:5142","repositorySlug":"opencode-5142","repositoryName":"strahlenexposition","repositoryPathWithNamespace":"uba-ki-lab/strahlenexposition","ecosystem":"pypi","name":"setuptools","identity":"pypi:setuptools","version":"80.0.1","versionKey":"pypi:setuptools@80.0.1","direct":null,"development":null,"sourceKind":"sbom-json","filePath":"sbom.json","blobSha":"bce3149701e5462f1af80e9221c0e2967402d606","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/strahlenexposition/-/blob/1dd9cd8ca823a7998b729adce6957848cf241d54/sbom.json","commitSha":"1dd9cd8ca823a7998b729adce6957848cf241d54"}],"occurrenceCount":15},"related":{"repositories":[{"id":"opencode:10162","slug":"opencode-10162","name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","versions":["80.9.0","82.0.1"],"evidenceCount":2},{"id":"opencode:5142","slug":"opencode-5142","name":"strahlenexposition","pathWithNamespace":"uba-ki-lab/strahlenexposition","versions":["80.0.1"],"evidenceCount":2},{"id":"opencode:6174","slug":"opencode-6174","name":"Energieautarkes Wohnquartier - Backend","pathWithNamespace":"energieautarkes-wohnquartier/backend","versions":["80.4.0"],"evidenceCount":1},{"id":"opencode:3608","slug":"opencode-3608","name":"AI","pathWithNamespace":"iqsh/collaboration-online-board/ai","versions":["69.2.0"],"evidenceCount":1},{"id":"opencode:7674","slug":"opencode-7674","name":"Coding Agent Usage Simulation","pathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","versions":["79.0.1"],"evidenceCount":1},{"id":"opencode:9998","slug":"opencode-9998","name":"density-maps","pathWithNamespace":"uba-ki-lab/density-maps","versions":["82.0.1"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["80.9.0"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["79.0.1"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["80.3.1"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["75.8.0"],"evidenceCount":1},{"id":"opencode:5201","slug":"opencode-5201","name":"photovoltaic_systems","pathWithNamespace":"uba-ki-lab/photovoltaic_systems","versions":["80.8.0"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["80.9.0"],"evidenceCount":1},{"id":"opencode:7811","slug":"opencode-7811","name":"Retrieval Evaluation","pathWithNamespace":"uba-ki-lab/retrieval-evaluation","versions":["80.9.0"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-5rjg-fvgr-3xxf","slug":"ghsa-5rjg-fvgr-3xxf-79d39e6b","dossier":false,"summary":"setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write","aliases":["BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49"],"sourceIds":["GHSA-5rjg-fvgr-3xxf","PYSEC-2025-49"],"published":"2025-05-17T16:15:19Z","modified":"2026-05-11T00:26:34.671259971Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47273"},{"type":"REPORT","url":"https://github.com/pypa/setuptools/issues/4946"},{"type":"FIX","url":"https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml"},{"type":"PACKAGE","url":"https://github.com/pypa/setuptools"},{"type":"WEB","url":"https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html"}],"versionKeys":["pypi:setuptools@69.2.0","pypi:setuptools@75.8.0"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-cx63-2mw6-8hw5","slug":"ghsa-cx63-2mw6-8hw5-1754ad59","dossier":false,"summary":"setuptools vulnerable to Command Injection via package URL","aliases":["BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918"],"sourceIds":["GHSA-cx63-2mw6-8hw5","PYSEC-2026-1918"],"published":"2024-07-15T03:30:57Z","modified":"2026-07-07T17:57:13.326243614Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6345"},{"type":"WEB","url":"https://github.com/pypa/setuptools/pull/4332"},{"type":"WEB","url":"https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0"},{"type":"PACKAGE","url":"https://github.com/pypa/setuptools"},{"type":"WEB","url":"https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html"},{"type":"PACKAGE","url":"https://pypi.org/project/setuptools"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-cx63-2mw6-8hw5"}],"versionKeys":["pypi:setuptools@69.2.0"],"packageCount":1,"repositoryCount":1},{"id":"PYSEC-2026-3447","slug":"pysec-2026-3447-df031425","dossier":true,"summary":null,"aliases":["BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c"],"sourceIds":["PYSEC-2026-3447"],"published":"2026-07-08T17:17:27.020Z","modified":"2026-07-14T10:56:37.948360943Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/pypa/setuptools/releases/tag/v83.0.0"},{"type":"FIX","url":"https://github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f"},{"type":"EVIDENCE","url":"https://github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c"}],"versionKeys":["pypi:setuptools@69.2.0","pypi:setuptools@75.8.0","pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1"],"packageCount":1,"repositoryCount":13}]}}