{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-09-16T04:45:26.395Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-09-16T04:44:00.147Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":43,"completeTreeCount":42,"incompleteTreeCount":1,"lockfileRepositoryCount":23,"sbomRepositoryCount":4,"artifactRepositoryCount":26,"resolvedRepositoryCount":40,"resolvedArtifactRepositoryCount":26,"dependencyFileCount":37,"parsedFileCount":36,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4116,"metadataResolvedCount":4105,"metadataNotFoundCount":11,"osvEvaluatedVersionCount":4116,"codeRadarRepositoryCount":43},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":8000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":43,"packageCount":2457,"aiPackageCount":50,"resolvedComponentCount":7121,"resolvedVersionCount":4116,"providerExposureRepositoryCount":9,"licenseExpressionCount":55,"knownLicensePackageCount":2423,"unknownLicensePackageCount":34,"advisoryCount":795,"matchedAdvisoryRepositoryCount":37,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":23,"repositoryShare":0.5348837209302325}},"kind":"repository","entity":{"id":"opencode:11297","slug":"opencode-11297","gitlabProjectId":11297,"name":"URBAN.KI AIMOS","pathWithNamespace":"vernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-aimos","description":null,"webUrl":"https://gitlab.opencode.de/vernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-aimos","commitSha":"0b637c00c16cf34077e6ddec1d86849e73c12d9d","commitUrl":"https://gitlab.opencode.de/vernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-aimos/-/commit/0b637c00c16cf34077e6ddec1d86849e73c12d9d","lastActivityAt":"2026-09-15T12:43:07.132Z","headCommittedAt":"2026-09-14T08:21:15.000Z","tree":{"complete":true,"entryCount":514,"truncated":false},"files":[],"resolvedComponentCount":3,"artifactResolvedComponentCount":0,"exactManifestPinCount":3,"packageCount":3,"ecosystems":["pypi"],"aiPackageCount":3,"licenseExpressionCount":3,"unknownLicensePackageCount":0,"advisoryIds":["GHSA-jw8x-6495-233v"],"advisoryCount":1,"providers":[]},"evidence":{"files":[{"path":"requirements.txt","kind":"exact-manifest-pin","sourceUrl":"https://gitlab.opencode.de/vernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-aimos/-/blob/0b637c00c16cf34077e6ddec1d86849e73c12d9d/requirements.txt","commitSha":"0b637c00c16cf34077e6ddec1d86849e73c12d9d","blobSha":"3b48ccff6ed940ba0b52fae1981a94d9f72cd097","state":"parsed","componentCount":3}],"occurrenceCount":3},"related":{"packages":[{"id":"package:pypi:scikit-learn","slug":"scikit-learn-ab0941d9","identity":"pypi:scikit-learn","label":"scikit-learn","aiRelevant":true,"provider":null,"advisoryCount":1,"licenseExpressions":["BSD-3-Clause","non-standard"],"versions":["1.7.1"],"dossier":true,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["requirements.txt"]},{"id":"package:pypi:lightgbm","slug":"lightgbm-da1283c4","identity":"pypi:lightgbm","label":"LightGBM","aiRelevant":true,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["4.6.0"],"dossier":true,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["requirements.txt"]},{"id":"package:pypi:xgboost","slug":"xgboost-5a870b45","identity":"pypi:xgboost","label":"XGBoost","aiRelevant":true,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["3.0.3"],"dossier":true,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["requirements.txt"]}],"vulnerabilities":[{"id":"GHSA-jw8x-6495-233v","slug":"ghsa-jw8x-6495-233v-cb32b711","dossier":false,"summary":"scikit-learn sensitive data leakage vulnerability","aliases":["CVE-2024-5206","PYSEC-2024-110"],"sourceIds":["GHSA-jw8x-6495-233v","PYSEC-2024-110"],"published":"2024-06-06T19:16:00Z","modified":"2026-09-10T03:50:15.628224747Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5206"},{"type":"FIX","url":"https://github.com/scikit-learn/scikit-learn/commit/70ca21f106b603b611da73012c9ade7cd8e438b8"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/scikit-learn/PYSEC-2024-110.yaml"},{"type":"PACKAGE","url":"https://github.com/scikit-learn/scikit-learn"},{"type":"WEB","url":"https://huntr.com/bounties/14bc0917-a85b-4106-a170-d09d5191517c"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-jw8x-6495-233v"}],"versionKeys":["pypi:scikit-learn@1.3.2"],"packageCount":1,"repositoryCount":1}]}}