i6eal.de
DEEN
Start a project
← Back to the AI Dependency AtlasExact repository supply-chain dossier

fish_monitoring

uba-ki-lab/fish_monitoring
pypi

This dossier retains 34 exact component occurrences from 2 published evidence files at one immutable repository commit.

opencode:513749e06e88ca3dproject ID + commit SHA + exact evidence path

Published dependency evidence does not prove deployment, productive use, procurement or runtime reachability.

project ID + commit SHA + exact evidence path
34exact component occurrences
34package identities
2evidence files
2OSV records returned
Exact published evidence

Files that resolve this repository’s dependencies

Every file remains tied to the observed commit. A parse error stays visible and never becomes a zero.

Evidence pathpyproject.toml
Format
exact-manifest-pin
Parser state
parsed
Resolved components
1
Open exact source ↗
Evidence pathsbom.JSONsha256:27c80944bcf2f0f6c455d3ea43a0c03727f9d2a828a83991f6aef5c317f41bd9
Format
sbom-json
Parser state
parsed
Resolved components
33
Open exact source ↗
Observed relations

Package identities at this commit

pypiUltralyticspypi:ultralytics
1 Occurrence8.3.3
AGPL-3.0
→
pypiidnapypi:idna
1 Occurrence3.10
BSD-3-Clause · non-standard1 OSV record returned
→
pypilxmlpypi:lxml
1 Occurrence5.4.0
BSD-3-Clause1 OSV record returned
pypiarrowpypi:arrow
1 Occurrence1.3.0
non-standard
pypiattrspypi:attrs
1 Occurrence25.3.0
MIT
pypiboolean-pypypi:boolean-py
1 Occurrence5.0
BSD-2-Clause
pypichardetpypi:chardet
1 Occurrence5.2.0
0BSD · non-standard
pypicyclonedx-bompypi:cyclonedx-bom
1 Occurrence6.1.1
Apache-2.0
pypicyclonedx-pypypi:cyclonedx-py
1 Occurrence1.0.1
Not reported
pypicyclonedx-python-libpypi:cyclonedx-python-lib
1 Occurrence10.0.1
Apache-2.0
pypidefusedxmlpypi:defusedxml
1 Occurrence0.7.1
non-standard
pypifqdnpypi:fqdn
1 Occurrence1.5.1
non-standard
pypiisodurationpypi:isoduration
1 Occurrence20.11.0
ISC
pypijsonpointerpypi:jsonpointer
1 Occurrence3.0.0
non-standard
pypijsonschemapypi:jsonschema
1 Occurrence4.23.0
MIT
pypijsonschema-specificationspypi:jsonschema-specifications
1 Occurrence2025.4.1
MIT
pypilicense-expressionpypi:license-expression
1 Occurrence30.4.1
Apache-2.0
pypipackageurl-pythonpypi:packageurl-python
1 Occurrence0.16.0
MIT
pypipackagingpypi:packaging
1 Occurrence25.0
Apache-2.0 OR BSD-2-Clause · non-standard
pypipip-requirements-parserpypi:pip-requirements-parser
1 Occurrence32.0.1
MIT
pypipy-serializablepypi:py-serializable
1 Occurrence2.0.0
Apache-2.0
pypipyparsingpypi:pyparsing
1 Occurrence3.2.3
MIT
pypipython-dateutilpypi:python-dateutil
1 Occurrence2.9.0.post0
non-standard
pypireferencingpypi:referencing
1 Occurrence0.36.2
MIT
pypirfc3339-validatorpypi:rfc3339-validator
1 Occurrence0.1.4
MIT
pypirfc3987pypi:rfc3987
1 Occurrence1.3.8
non-standard
pypirpds-pypypi:rpds-py
1 Occurrence0.25.0
MIT
pypisixpypi:six
1 Occurrence1.17.0
MIT
pypisortedcontainerspypi:sortedcontainers
1 Occurrence2.4.0
Apache-2.0
pypitomlipypi:tomli
1 Occurrence2.2.1
MIT
pypitypes-python-dateutilpypi:types-python-dateutil
1 Occurrence2.9.0.20241206
Apache-2.0
pypityping-extensionspypi:typing-extensions
1 Occurrence4.13.2
PSF-2.0 · non-standard
pypiuri-templatepypi:uri-template
1 Occurrence1.3.0
MIT
pypiwebcolorspypi:webcolors
1 Occurrence24.11.1
BSD-3-Clause
OSV

Related OSV records

GHSA-65pc-fj4g-8rjx

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

17 repositories08 Jul 2026
→
GHSA-vfmq-68hx-4jfw

lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files

5 repositories06 Jun 2026
Interpretation boundary

Exact identities in, explicit limits out

The collector reads bounded lockfiles, SBOMs and exact double-equals pins at one immutable commit. Version ranges are never resolved by assumption.

Retrieval, parsing, matching and publishing use no generative AI model.

i6eal (2026): fish_monitoring — exact AI dependency evidence dossier, data state 19 Jul 2026. https://i6eal.de/en/tools/ki-abhaengigkeitsatlas/repository/opencode-5137/

Reading this dossier

Does this repository dossier prove deployment?
No. It documents dependencies published at one observed commit, not a deployed environment.
Why are exact versions required?
OSV and registry metadata can be linked reproducibly only to an observed package@version tuple. The collector never substitutes a newest release for a range.
Does a missing row mean the dependency is absent?
No. It means not observed within the bounded files and repository checkpoint. Incomplete trees and parser failures remain explicit.

Need a permanent dependency evidence trail for another public code cohort?

We build source-backed data products with stable identities, reproducible joins and boundaries that remain visible.

Discuss a data projectExplore all tools
Related tools

Useful next steps

These tools complement the current result.

View all tools
MonitorGerman public-sector AI Code RadarWhich AI building blocks does German public administration publish as open code? Exact packages, containers, commit SHAs and file paths from openCode, with permanent dossiers and no deployment claim.MonitorGerman public-sector AI registerWhere does German public administration already use AI? Search published system profiles from federal, state and municipal bodies, with lifecycle, governance fields, stable identifiers and original evidence.Provenance checkPublic-sector AI system passportSee which public records can be linked to each published government AI system through stable identifiers or exact source-declared repository URLs—with a source for every edge and visible evidence boundaries.