{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-07-20T14:37:29.537Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-07-20T14:36:19.763Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":30,"completeTreeCount":29,"incompleteTreeCount":1,"lockfileRepositoryCount":17,"sbomRepositoryCount":4,"artifactRepositoryCount":20,"resolvedRepositoryCount":29,"resolvedArtifactRepositoryCount":20,"dependencyFileCount":33,"parsedFileCount":32,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4205,"metadataResolvedCount":4191,"metadataNotFoundCount":14,"osvEvaluatedVersionCount":4205,"codeRadarRepositoryCount":30},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":5000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":30,"packageCount":2831,"aiPackageCount":41,"resolvedComponentCount":7181,"resolvedVersionCount":4205,"providerExposureRepositoryCount":7,"licenseExpressionCount":57,"knownLicensePackageCount":2796,"unknownLicensePackageCount":35,"advisoryCount":572,"matchedAdvisoryRepositoryCount":25,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":18,"repositoryShare":0.6}},"kind":"paket","entity":{"id":"package:pypi:virtualenv","slug":"virtualenv-aeb2a546","identity":"pypi:virtualenv","ecosystem":"pypi","name":"virtualenv","label":"virtualenv","category":null,"aiRelevant":false,"provider":null,"repositoryCount":7,"occurrenceCount":10,"directRepositoryCount":0,"versionCount":6,"licenseExpressions":["MIT"],"advisoryIds":["GHSA-597g-3phw-6986"],"advisoryCount":1,"verifiedAttestation":true,"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["21.2.4","21.3.1"],"evidenceCount":3},{"id":"opencode:5142","slug":"opencode-5142","name":"strahlenexposition","pathWithNamespace":"uba-ki-lab/strahlenexposition","versions":["20.30.0"],"evidenceCount":2},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["20.34.0"],"evidenceCount":1},{"id":"opencode:10162","slug":"opencode-10162","name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","versions":["20.34.0"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["20.34.0"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["20.31.1"],"evidenceCount":1},{"id":"opencode:7811","slug":"opencode-7811","name":"Retrieval Evaluation","pathWithNamespace":"uba-ki-lab/retrieval-evaluation","versions":["20.35.4"],"evidenceCount":1}],"versions":[{"version":"20.30.0","repositoryCount":1,"occurrenceCount":2,"ageDays":475,"advisoryIds":["GHSA-597g-3phw-6986"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-03-31T16:33:26Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-597g-3phw-6986","PYSEC-2026-2009"],"links":[{"label":"DOCUMENTATION","url":"https://virtualenv.pypa.io/"},{"label":"HOMEPAGE","url":"https://github.com/pypa/virtualenv"},{"label":"SOURCE_REPO","url":"https://github.com/pypa/virtualenv"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/virtualenv/20.30.0/virtualenv-20.30.0-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/pypa/virtualenv","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pypa/virtualenv","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/virtualenv/20.30.0/virtualenv-20.30.0-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/pypa/virtualenv","commit":"04163aed5477b7f81acb30390e1ecc6d740b54ea"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"20.31.1","repositoryCount":1,"occurrenceCount":1,"ageDays":440,"advisoryIds":["GHSA-597g-3phw-6986"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-05-05T22:45:37Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-597g-3phw-6986","PYSEC-2026-2009"],"links":[{"label":"HOMEPAGE","url":"https://github.com/pypa/virtualenv"},{"label":"SOURCE_REPO","url":"https://github.com/pypa/virtualenv"},{"label":"DOCUMENTATION","url":"https://virtualenv.pypa.io/"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/virtualenv/20.31.1/virtualenv-20.31.1-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/pypa/virtualenv","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pypa/virtualenv","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/virtualenv/20.31.1/virtualenv-20.31.1-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/pypa/virtualenv","commit":"572aa2319783c58d2729dd94a0e3fb5435d62ff3"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"20.34.0","repositoryCount":3,"occurrenceCount":3,"ageDays":341,"advisoryIds":["GHSA-597g-3phw-6986"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-08-13T14:24:05Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-597g-3phw-6986","PYSEC-2026-2009"],"links":[{"label":"HOMEPAGE","url":"https://github.com/pypa/virtualenv"},{"label":"SOURCE_REPO","url":"https://github.com/pypa/virtualenv"},{"label":"DOCUMENTATION","url":"https://virtualenv.pypa.io/"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/virtualenv/20.34.0/virtualenv-20.34.0-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/pypa/virtualenv","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pypa/virtualenv","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/virtualenv/20.34.0/virtualenv-20.34.0-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/pypa/virtualenv","commit":"a1ed8bb99695dc9b50fea0a22c54e4f77bde08f9"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"20.35.4","repositoryCount":1,"occurrenceCount":1,"ageDays":264,"advisoryIds":["GHSA-597g-3phw-6986"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-10-29T06:57:37Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-597g-3phw-6986","PYSEC-2026-2009"],"links":[{"label":"HOMEPAGE","url":"https://github.com/pypa/virtualenv"},{"label":"SOURCE_REPO","url":"https://github.com/pypa/virtualenv"},{"label":"DOCUMENTATION","url":"https://virtualenv.pypa.io/"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/virtualenv/20.35.4/virtualenv-20.35.4-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/pypa/virtualenv","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pypa/virtualenv","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/virtualenv/20.35.4/virtualenv-20.35.4-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/pypa/virtualenv","commit":"03815342726b1a8b33b55b5057bfd46b1d6b74c1"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"21.2.4","repositoryCount":1,"occurrenceCount":1,"ageDays":96,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-04-14T22:15:29Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"DOCUMENTATION","url":"https://virtualenv.pypa.io/"},{"label":"HOMEPAGE","url":"https://github.com/pypa/virtualenv"},{"label":"SOURCE_REPO","url":"https://github.com/pypa/virtualenv"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/virtualenv/21.2.4/virtualenv-21.2.4-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/pypa/virtualenv","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pypa/virtualenv","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/virtualenv/21.2.4/virtualenv-21.2.4-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/pypa/virtualenv","commit":"15063c10b3afae1d3fa3234e99f956434051f7b5"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"21.3.1","repositoryCount":1,"occurrenceCount":2,"ageDays":76,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-05-05T01:34:28Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://github.com/pypa/virtualenv"},{"label":"SOURCE_REPO","url":"https://github.com/pypa/virtualenv"},{"label":"DOCUMENTATION","url":"https://virtualenv.pypa.io/"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/virtualenv/21.3.1/virtualenv-21.3.1-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/pypa/virtualenv","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pypa/virtualenv","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/virtualenv/21.3.1/virtualenv-21.3.1-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/pypa/virtualenv","commit":"12ab4957289c1963849bf04a5f35982c928c0a35"}],"verifiedAttestation":true,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:3ea8d63e4516a41f121f248d","repositoryId":"opencode:7781","repositorySlug":"opencode-7781","repositoryName":"kiva-llm-gateway","repositoryPathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","ecosystem":"pypi","name":"virtualenv","identity":"pypi:virtualenv","version":"20.34.0","versionKey":"pypi:virtualenv@20.34.0","direct":null,"development":true,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"48f984e4d97ce607df0ee30b09a8e1e4c935e9db","sourceUrl":"https://gitlab.opencode.de/baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway/-/blob/4a5cd798be9b97cc1bff7b30d930eafda774e380/poetry.lock","commitSha":"4a5cd798be9b97cc1bff7b30d930eafda774e380"},{"id":"component:c31c320cc385ba9b810d77f5","repositoryId":"opencode:10787","repositorySlug":"opencode-10787","repositoryName":"LLM Questionnaire Benchmarking Framework","repositoryPathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","ecosystem":"pypi","name":"virtualenv","identity":"pypi:virtualenv","version":"20.34.0","versionKey":"pypi:virtualenv@20.34.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b55661fee93d4733461df8e9c2b491b9205aac2","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-questionnaire-benchmarking-framework/-/blob/4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd/uv.lock","commitSha":"4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd"},{"id":"component:bfc9f0d63103a4a04a295062","repositoryId":"opencode:5012","repositorySlug":"opencode-5012","repositoryName":"LLM Testframework","repositoryPathWithNamespace":"uba-ki-lab/llm-testframework","ecosystem":"pypi","name":"virtualenv","identity":"pypi:virtualenv","version":"20.31.1","versionKey":"pypi:virtualenv@20.31.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"b4c29eab16a40db016821e4ea567956048a046ea","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-testframework/-/blob/e8d6e99a1fa63b264e727acb553ed9b1499789b1/uv.lock","commitSha":"e8d6e99a1fa63b264e727acb553ed9b1499789b1"},{"id":"component:83d47df8835b49fe05134d30","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"virtualenv","identity":"pypi:virtualenv","version":"21.2.4","versionKey":"pypi:virtualenv@21.2.4","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"77989726989ea666c8557d105b2bf2c064daa319","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"},{"id":"component:4a861d212db0ccfe264c4e3c","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"virtualenv","identity":"pypi:virtualenv","version":"21.3.1","versionKey":"pypi:virtualenv@21.3.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-assistant-service/uv.lock","blobSha":"36b26ae58598809148cf87cffcc3b67380e8b928","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/mucgpt-assistant-service/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"},{"id":"component:04d569dd18bec8efcf725da4","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"virtualenv","identity":"pypi:virtualenv","version":"21.3.1","versionKey":"pypi:virtualenv@21.3.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-core-service/uv.lock","blobSha":"8bf6980137a09f5692c9e62798298a2cd9122a99","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/mucgpt-core-service/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"},{"id":"component:95daa23ffe6efeda063ed754","repositoryId":"opencode:7811","repositorySlug":"opencode-7811","repositoryName":"Retrieval Evaluation","repositoryPathWithNamespace":"uba-ki-lab/retrieval-evaluation","ecosystem":"pypi","name":"virtualenv","identity":"pypi:virtualenv","version":"20.35.4","versionKey":"pypi:virtualenv@20.35.4","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"20c0181bf785c3e980512ba2de16e0fe3f207bad","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/retrieval-evaluation/-/blob/f64bf528432908908d92b8263d6933301033bb7f/uv.lock","commitSha":"f64bf528432908908d92b8263d6933301033bb7f"},{"id":"component:ea8d4175d6834589ac013690","repositoryId":"opencode:10162","repositorySlug":"opencode-10162","repositoryName":"SmartPlanAI Anwendung","repositoryPathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","ecosystem":"pypi","name":"virtualenv","identity":"pypi:virtualenv","version":"20.34.0","versionKey":"pypi:virtualenv@20.34.0","direct":null,"development":true,"sourceKind":"poetry-lock","filePath":"blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","blobSha":"40fa29ec0b8e6e3bfbf4c2ff77526dd4038e0299","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f"},{"id":"component:2c9e91eb85f3e81df906de8b","repositoryId":"opencode:5142","repositorySlug":"opencode-5142","repositoryName":"strahlenexposition","repositoryPathWithNamespace":"uba-ki-lab/strahlenexposition","ecosystem":"pypi","name":"virtualenv","identity":"pypi:virtualenv","version":"20.30.0","versionKey":"pypi:virtualenv@20.30.0","direct":null,"development":true,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"681193f56a8b37b97336b2682fc1147ac3bdab1f","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/strahlenexposition/-/blob/1dd9cd8ca823a7998b729adce6957848cf241d54/poetry.lock","commitSha":"1dd9cd8ca823a7998b729adce6957848cf241d54"},{"id":"component:aa7a0f036c02b75509f61f03","repositoryId":"opencode:5142","repositorySlug":"opencode-5142","repositoryName":"strahlenexposition","repositoryPathWithNamespace":"uba-ki-lab/strahlenexposition","ecosystem":"pypi","name":"virtualenv","identity":"pypi:virtualenv","version":"20.30.0","versionKey":"pypi:virtualenv@20.30.0","direct":null,"development":null,"sourceKind":"sbom-json","filePath":"sbom.json","blobSha":"bce3149701e5462f1af80e9221c0e2967402d606","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/strahlenexposition/-/blob/1dd9cd8ca823a7998b729adce6957848cf241d54/sbom.json","commitSha":"1dd9cd8ca823a7998b729adce6957848cf241d54"}],"occurrenceCount":10},"related":{"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["21.2.4","21.3.1"],"evidenceCount":3},{"id":"opencode:5142","slug":"opencode-5142","name":"strahlenexposition","pathWithNamespace":"uba-ki-lab/strahlenexposition","versions":["20.30.0"],"evidenceCount":2},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["20.34.0"],"evidenceCount":1},{"id":"opencode:10162","slug":"opencode-10162","name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","versions":["20.34.0"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["20.34.0"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["20.31.1"],"evidenceCount":1},{"id":"opencode:7811","slug":"opencode-7811","name":"Retrieval Evaluation","pathWithNamespace":"uba-ki-lab/retrieval-evaluation","versions":["20.35.4"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-597g-3phw-6986","slug":"ghsa-597g-3phw-6986-6d75801e","dossier":false,"summary":"virtualenv Has TOCTOU Vulnerabilities in Directory Creation","aliases":["BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009"],"sourceIds":["GHSA-597g-3phw-6986","PYSEC-2026-2009"],"published":"2026-01-13T18:45:57Z","modified":"2026-07-07T17:57:28.238961214Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L"}],"references":[{"type":"WEB","url":"https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22702"},{"type":"WEB","url":"https://github.com/pypa/virtualenv/pull/3013"},{"type":"FIX","url":"https://github.com/pypa/virtualenv/commit/dec4cec5d16edaf83a00a658f32d1e032661cebc"},{"type":"PACKAGE","url":"https://github.com/pypa/virtualenv"},{"type":"PACKAGE","url":"https://pypi.org/project/virtualenv"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-597g-3phw-6986"}],"versionKeys":["pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4"],"packageCount":1,"repositoryCount":6}]}}