[{"data":1,"prerenderedAt":383},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-virtualenv-aeb2a546":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":272,"related":334},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"paket",{"id":79,"slug":80,"identity":81,"ecosystem":82,"name":83,"label":83,"category":84,"aiRelevant":46,"provider":84,"repositoryCount":65,"occurrenceCount":85,"directRepositoryCount":38,"versionCount":86,"licenseExpressions":87,"advisoryIds":89,"advisoryCount":32,"verifiedAttestation":91,"repositories":92,"versions":143},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","pypi","virtualenv",null,10,6,[88],"MIT",[90],"GHSA-597g-3phw-6986",true,[93,102,110,117,123,129,136],{"id":94,"slug":95,"name":96,"pathWithNamespace":97,"versions":98,"evidenceCount":101},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[99,100],"21.2.4","21.3.1",3,{"id":103,"slug":104,"name":105,"pathWithNamespace":106,"versions":107,"evidenceCount":109},"opencode:5142","opencode-5142","strahlenexposition","uba-ki-lab\u002Fstrahlenexposition",[108],"20.30.0",2,{"id":111,"slug":112,"name":113,"pathWithNamespace":114,"versions":115,"evidenceCount":32},"opencode:7781","opencode-7781","kiva-llm-gateway","baden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway",[116],"20.34.0",{"id":118,"slug":119,"name":120,"pathWithNamespace":121,"versions":122,"evidenceCount":32},"opencode:10162","opencode-10162","SmartPlanAI Anwendung","sh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung",[116],{"id":124,"slug":125,"name":126,"pathWithNamespace":127,"versions":128,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[116],{"id":130,"slug":131,"name":132,"pathWithNamespace":133,"versions":134,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[135],"20.31.1",{"id":137,"slug":138,"name":139,"pathWithNamespace":140,"versions":141,"evidenceCount":32},"opencode:7811","opencode-7811","Retrieval Evaluation","uba-ki-lab\u002Fretrieval-evaluation",[142],"20.35.4",[144,177,196,215,234,253],{"version":108,"repositoryCount":32,"occurrenceCount":109,"ageDays":145,"advisoryIds":146,"metadata":147},475,[90],{"state":148,"checkedAt":149,"publishedAt":150,"deprecated":46,"deprecatedReason":84,"licenses":151,"advisoryIds":152,"links":154,"relatedProjects":166,"attestations":172,"verifiedAttestation":91,"projectStatus":176},"resolved","2026-07-20T03:19:50.101Z","2025-03-31T16:33:26Z",[88],[90,153],"PYSEC-2026-2009",[155,158,161,163],{"label":156,"url":157},"DOCUMENTATION","https:\u002F\u002Fvirtualenv.pypa.io\u002F",{"label":159,"url":160},"HOMEPAGE","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"label":162,"url":160},"SOURCE_REPO",{"label":164,"url":165},"ATTESTATION","https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fvirtualenv\u002F20.30.0\u002Fvirtualenv-20.30.0-py3-none-any.whl\u002Fprovenance",[167,170],{"id":168,"relationType":162,"relationProvenance":169},"github.com\u002Fpypa\u002Fvirtualenv","UNVERIFIED_METADATA",{"id":168,"relationType":162,"relationProvenance":171},"PYPI_PUBLISH_ATTESTATION",[173],{"type":174,"url":165,"verified":91,"sourceRepository":160,"commit":175},"https:\u002F\u002Fdocs.pypi.org\u002Fattestations\u002Fpublish\u002Fv1","04163aed5477b7f81acb30390e1ecc6d740b54ea","active",{"version":135,"repositoryCount":32,"occurrenceCount":32,"ageDays":178,"advisoryIds":179,"metadata":180},440,[90],{"state":148,"checkedAt":149,"publishedAt":181,"deprecated":46,"deprecatedReason":84,"licenses":182,"advisoryIds":183,"links":184,"relatedProjects":190,"attestations":193,"verifiedAttestation":91,"projectStatus":176},"2025-05-05T22:45:37Z",[88],[90,153],[185,186,187,188],{"label":159,"url":160},{"label":162,"url":160},{"label":156,"url":157},{"label":164,"url":189},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fvirtualenv\u002F20.31.1\u002Fvirtualenv-20.31.1-py3-none-any.whl\u002Fprovenance",[191,192],{"id":168,"relationType":162,"relationProvenance":169},{"id":168,"relationType":162,"relationProvenance":171},[194],{"type":174,"url":189,"verified":91,"sourceRepository":160,"commit":195},"572aa2319783c58d2729dd94a0e3fb5435d62ff3",{"version":116,"repositoryCount":101,"occurrenceCount":101,"ageDays":197,"advisoryIds":198,"metadata":199},341,[90],{"state":148,"checkedAt":149,"publishedAt":200,"deprecated":46,"deprecatedReason":84,"licenses":201,"advisoryIds":202,"links":203,"relatedProjects":209,"attestations":212,"verifiedAttestation":91,"projectStatus":176},"2025-08-13T14:24:05Z",[88],[90,153],[204,205,206,207],{"label":159,"url":160},{"label":162,"url":160},{"label":156,"url":157},{"label":164,"url":208},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fvirtualenv\u002F20.34.0\u002Fvirtualenv-20.34.0-py3-none-any.whl\u002Fprovenance",[210,211],{"id":168,"relationType":162,"relationProvenance":169},{"id":168,"relationType":162,"relationProvenance":171},[213],{"type":174,"url":208,"verified":91,"sourceRepository":160,"commit":214},"a1ed8bb99695dc9b50fea0a22c54e4f77bde08f9",{"version":142,"repositoryCount":32,"occurrenceCount":32,"ageDays":216,"advisoryIds":217,"metadata":218},264,[90],{"state":148,"checkedAt":149,"publishedAt":219,"deprecated":46,"deprecatedReason":84,"licenses":220,"advisoryIds":221,"links":222,"relatedProjects":228,"attestations":231,"verifiedAttestation":91,"projectStatus":176},"2025-10-29T06:57:37Z",[88],[90,153],[223,224,225,226],{"label":159,"url":160},{"label":162,"url":160},{"label":156,"url":157},{"label":164,"url":227},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fvirtualenv\u002F20.35.4\u002Fvirtualenv-20.35.4-py3-none-any.whl\u002Fprovenance",[229,230],{"id":168,"relationType":162,"relationProvenance":169},{"id":168,"relationType":162,"relationProvenance":171},[232],{"type":174,"url":227,"verified":91,"sourceRepository":160,"commit":233},"03815342726b1a8b33b55b5057bfd46b1d6b74c1",{"version":99,"repositoryCount":32,"occurrenceCount":32,"ageDays":235,"advisoryIds":236,"metadata":237},96,[],{"state":148,"checkedAt":149,"publishedAt":238,"deprecated":46,"deprecatedReason":84,"licenses":239,"advisoryIds":240,"links":241,"relatedProjects":247,"attestations":250,"verifiedAttestation":91,"projectStatus":176},"2026-04-14T22:15:29Z",[88],[],[242,243,244,245],{"label":156,"url":157},{"label":159,"url":160},{"label":162,"url":160},{"label":164,"url":246},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fvirtualenv\u002F21.2.4\u002Fvirtualenv-21.2.4-py3-none-any.whl\u002Fprovenance",[248,249],{"id":168,"relationType":162,"relationProvenance":169},{"id":168,"relationType":162,"relationProvenance":171},[251],{"type":174,"url":246,"verified":91,"sourceRepository":160,"commit":252},"15063c10b3afae1d3fa3234e99f956434051f7b5",{"version":100,"repositoryCount":32,"occurrenceCount":109,"ageDays":254,"advisoryIds":255,"metadata":256},76,[],{"state":148,"checkedAt":149,"publishedAt":257,"deprecated":46,"deprecatedReason":84,"licenses":258,"advisoryIds":259,"links":260,"relatedProjects":266,"attestations":269,"verifiedAttestation":91,"projectStatus":176},"2026-05-05T01:34:28Z",[88],[],[261,262,263,264],{"label":159,"url":160},{"label":162,"url":160},{"label":156,"url":157},{"label":164,"url":265},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fvirtualenv\u002F21.3.1\u002Fvirtualenv-21.3.1-py3-none-any.whl\u002Fprovenance",[267,268],{"id":168,"relationType":162,"relationProvenance":169},{"id":168,"relationType":162,"relationProvenance":171},[270],{"type":174,"url":265,"verified":91,"sourceRepository":160,"commit":271},"12ab4957289c1963849bf04a5f35982c928c0a35",{"occurrences":273,"occurrenceCount":85},[274,281,287,293,299,305,310,316,322,328],{"id":275,"repositoryId":111,"repositorySlug":112,"repositoryName":113,"repositoryPathWithNamespace":114,"ecosystem":82,"name":83,"identity":81,"version":116,"versionKey":276,"direct":84,"development":91,"sourceKind":277,"filePath":56,"blobSha":278,"sourceUrl":279,"commitSha":280},"component:3ea8d63e4516a41f121f248d","pypi:virtualenv@20.34.0","poetry-lock","48f984e4d97ce607df0ee30b09a8e1e4c935e9db","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fblob\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380\u002Fpoetry.lock","4a5cd798be9b97cc1bff7b30d930eafda774e380",{"id":282,"repositoryId":124,"repositorySlug":125,"repositoryName":126,"repositoryPathWithNamespace":127,"ecosystem":82,"name":83,"identity":81,"version":116,"versionKey":276,"direct":84,"development":84,"sourceKind":283,"filePath":55,"blobSha":284,"sourceUrl":285,"commitSha":286},"component:c31c320cc385ba9b810d77f5","uv-lock","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":288,"repositoryId":130,"repositorySlug":131,"repositoryName":132,"repositoryPathWithNamespace":133,"ecosystem":82,"name":83,"identity":81,"version":135,"versionKey":289,"direct":84,"development":84,"sourceKind":283,"filePath":55,"blobSha":290,"sourceUrl":291,"commitSha":292},"component:bfc9f0d63103a4a04a295062","pypi:virtualenv@20.31.1","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"id":294,"repositoryId":94,"repositorySlug":95,"repositoryName":96,"repositoryPathWithNamespace":97,"ecosystem":82,"name":83,"identity":81,"version":99,"versionKey":295,"direct":84,"development":84,"sourceKind":283,"filePath":55,"blobSha":296,"sourceUrl":297,"commitSha":298},"component:83d47df8835b49fe05134d30","pypi:virtualenv@21.2.4","77989726989ea666c8557d105b2bf2c064daa319","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fuv.lock","46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8",{"id":300,"repositoryId":94,"repositorySlug":95,"repositoryName":96,"repositoryPathWithNamespace":97,"ecosystem":82,"name":83,"identity":81,"version":100,"versionKey":301,"direct":84,"development":84,"sourceKind":283,"filePath":302,"blobSha":303,"sourceUrl":304,"commitSha":298},"component:4a861d212db0ccfe264c4e3c","pypi:virtualenv@21.3.1","mucgpt-assistant-service\u002Fuv.lock","36b26ae58598809148cf87cffcc3b67380e8b928","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fmucgpt-assistant-service\u002Fuv.lock",{"id":306,"repositoryId":94,"repositorySlug":95,"repositoryName":96,"repositoryPathWithNamespace":97,"ecosystem":82,"name":83,"identity":81,"version":100,"versionKey":301,"direct":84,"development":84,"sourceKind":283,"filePath":307,"blobSha":308,"sourceUrl":309,"commitSha":298},"component:04d569dd18bec8efcf725da4","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fmucgpt-core-service\u002Fuv.lock",{"id":311,"repositoryId":137,"repositorySlug":138,"repositoryName":139,"repositoryPathWithNamespace":140,"ecosystem":82,"name":83,"identity":81,"version":142,"versionKey":312,"direct":84,"development":84,"sourceKind":283,"filePath":55,"blobSha":313,"sourceUrl":314,"commitSha":315},"component:95daa23ffe6efeda063ed754","pypi:virtualenv@20.35.4","20c0181bf785c3e980512ba2de16e0fe3f207bad","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fretrieval-evaluation\u002F-\u002Fblob\u002Ff64bf528432908908d92b8263d6933301033bb7f\u002Fuv.lock","f64bf528432908908d92b8263d6933301033bb7f",{"id":317,"repositoryId":118,"repositorySlug":119,"repositoryName":120,"repositoryPathWithNamespace":121,"ecosystem":82,"name":83,"identity":81,"version":116,"versionKey":276,"direct":84,"development":91,"sourceKind":277,"filePath":318,"blobSha":319,"sourceUrl":320,"commitSha":321},"component:ea8d4175d6834589ac013690","blp_streamlit_pipeline\u002Fsrc\u002Fext\u002Fstreamlit-draw-image-mask\u002Fpoetry.lock","40fa29ec0b8e6e3bfbf4c2ff77526dd4038e0299","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fblob\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f\u002Fblp_streamlit_pipeline\u002Fsrc\u002Fext\u002Fstreamlit-draw-image-mask\u002Fpoetry.lock","1d70807d48a8fae19711b10422c3417ab5d05d0f",{"id":323,"repositoryId":103,"repositorySlug":104,"repositoryName":105,"repositoryPathWithNamespace":106,"ecosystem":82,"name":83,"identity":81,"version":108,"versionKey":324,"direct":84,"development":91,"sourceKind":277,"filePath":56,"blobSha":325,"sourceUrl":326,"commitSha":327},"component:2c9e91eb85f3e81df906de8b","pypi:virtualenv@20.30.0","681193f56a8b37b97336b2682fc1147ac3bdab1f","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fblob\u002F1dd9cd8ca823a7998b729adce6957848cf241d54\u002Fpoetry.lock","1dd9cd8ca823a7998b729adce6957848cf241d54",{"id":329,"repositoryId":103,"repositorySlug":104,"repositoryName":105,"repositoryPathWithNamespace":106,"ecosystem":82,"name":83,"identity":81,"version":108,"versionKey":324,"direct":84,"development":84,"sourceKind":330,"filePath":331,"blobSha":332,"sourceUrl":333,"commitSha":327},"component:aa7a0f036c02b75509f61f03","sbom-json","sbom.json","bce3149701e5462f1af80e9221c0e2967402d606","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fblob\u002F1dd9cd8ca823a7998b729adce6957848cf241d54\u002Fsbom.json",{"repositories":335,"vulnerabilities":350},[336,338,340,342,344,346,348],{"id":94,"slug":95,"name":96,"pathWithNamespace":97,"versions":337,"evidenceCount":101},[99,100],{"id":103,"slug":104,"name":105,"pathWithNamespace":106,"versions":339,"evidenceCount":109},[108],{"id":111,"slug":112,"name":113,"pathWithNamespace":114,"versions":341,"evidenceCount":32},[116],{"id":118,"slug":119,"name":120,"pathWithNamespace":121,"versions":343,"evidenceCount":32},[116],{"id":124,"slug":125,"name":126,"pathWithNamespace":127,"versions":345,"evidenceCount":32},[116],{"id":130,"slug":131,"name":132,"pathWithNamespace":133,"versions":347,"evidenceCount":32},[135],{"id":137,"slug":138,"name":139,"pathWithNamespace":140,"versions":349,"evidenceCount":32},[142],[351],{"id":90,"slug":352,"dossier":46,"summary":353,"aliases":354,"sourceIds":357,"published":358,"modified":359,"checkedAt":7,"severity":360,"references":364,"versionKeys":382,"packageCount":32,"repositoryCount":86},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[355,356,153],"BIT-virtualenv-2026-22702","CVE-2026-22702",[90,153],"2026-01-13T18:45:57Z","2026-07-07T17:57:28.238961214Z",[361],{"type":362,"score":363},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[365,368,371,373,376,378,380],{"type":366,"url":367},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":369,"url":370},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":366,"url":372},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":374,"url":375},"FIX","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":377,"url":160},"PACKAGE",{"type":377,"url":379},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":369,"url":381},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[324,289,276,312],1784558564060]