[{"data":1,"prerenderedAt":221},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-dspy-70e56922":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":165,"related":186},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"paket",{"id":79,"slug":80,"identity":81,"ecosystem":82,"name":83,"label":84,"category":85,"aiRelevant":86,"provider":87,"repositoryCount":88,"occurrenceCount":88,"directRepositoryCount":38,"versionCount":88,"licenseExpressions":89,"advisoryIds":91,"advisoryCount":32,"verifiedAttestation":46,"repositories":93,"versions":115},"package:pypi:dspy","dspy-70e56922","pypi:dspy","pypi","dspy","DSPy","orchestration",true,null,3,[90],"MIT",[92],"GHSA-vvw2-h478-xwr3",[94,101,108],{"id":95,"slug":96,"name":97,"pathWithNamespace":98,"versions":99,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[100],"2.6.27",{"id":102,"slug":103,"name":104,"pathWithNamespace":105,"versions":106,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[107],"2.6.23",{"id":109,"slug":110,"name":111,"pathWithNamespace":112,"versions":113,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[114],"2.5.43",[116,136,152],{"version":114,"repositoryCount":32,"occurrenceCount":32,"ageDays":117,"advisoryIds":118,"metadata":119},583,[92],{"state":120,"checkedAt":121,"publishedAt":122,"deprecated":46,"deprecatedReason":87,"licenses":123,"advisoryIds":124,"links":126,"relatedProjects":130,"attestations":134,"verifiedAttestation":46,"projectStatus":135},"resolved","2026-07-20T03:19:50.101Z","2024-12-13T15:02:33Z",[90],[92,125],"PYSEC-2026-1318",[127],{"label":128,"url":129},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Fstanfordnlp\u002Fdsp",[131],{"id":132,"relationType":128,"relationProvenance":133},"github.com\u002Fstanfordnlp\u002Fdsp","UNVERIFIED_METADATA",[],"active",{"version":107,"repositoryCount":32,"occurrenceCount":32,"ageDays":137,"advisoryIds":138,"metadata":139},440,[92],{"state":120,"checkedAt":121,"publishedAt":140,"deprecated":46,"deprecatedReason":87,"licenses":141,"advisoryIds":142,"links":143,"relatedProjects":148,"attestations":151,"verifiedAttestation":46,"projectStatus":135},"2025-05-05T15:20:19Z",[90],[92,125],[144,147],{"label":145,"url":146},"HOMEPAGE","https:\u002F\u002Fgithub.com\u002Fstanfordnlp\u002Fdspy",{"label":128,"url":146},[149],{"id":150,"relationType":128,"relationProvenance":133},"github.com\u002Fstanfordnlp\u002Fdspy",[],{"version":100,"repositoryCount":32,"occurrenceCount":32,"ageDays":153,"advisoryIds":154,"metadata":155},411,[92],{"state":120,"checkedAt":121,"publishedAt":156,"deprecated":46,"deprecatedReason":87,"licenses":157,"advisoryIds":158,"links":159,"relatedProjects":162,"attestations":164,"verifiedAttestation":46,"projectStatus":135},"2025-06-03T17:47:11Z",[90],[92,125],[160,161],{"label":145,"url":146},{"label":128,"url":146},[163],{"id":150,"relationType":128,"relationProvenance":133},[],{"occurrences":166,"occurrenceCount":88},[167,174,180],{"id":168,"repositoryId":95,"repositorySlug":96,"repositoryName":97,"repositoryPathWithNamespace":98,"ecosystem":82,"name":83,"identity":81,"version":100,"versionKey":169,"direct":87,"development":87,"sourceKind":170,"filePath":55,"blobSha":171,"sourceUrl":172,"commitSha":173},"component:df6c47c7538956a2d075079a","pypi:dspy@2.6.27","uv-lock","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":175,"repositoryId":102,"repositorySlug":103,"repositoryName":104,"repositoryPathWithNamespace":105,"ecosystem":82,"name":83,"identity":81,"version":107,"versionKey":176,"direct":87,"development":87,"sourceKind":170,"filePath":55,"blobSha":177,"sourceUrl":178,"commitSha":179},"component:75a50b1bed116b35307c93c6","pypi:dspy@2.6.23","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"id":181,"repositoryId":109,"repositorySlug":110,"repositoryName":111,"repositoryPathWithNamespace":112,"ecosystem":82,"name":83,"identity":81,"version":114,"versionKey":182,"direct":87,"development":87,"sourceKind":170,"filePath":55,"blobSha":183,"sourceUrl":184,"commitSha":185},"component:55714d284dc273d83d161bfe","pypi:dspy@2.5.43","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"repositories":187,"vulnerabilities":194},[188,190,192],{"id":95,"slug":96,"name":97,"pathWithNamespace":98,"versions":189,"evidenceCount":32},[100],{"id":102,"slug":103,"name":104,"pathWithNamespace":105,"versions":191,"evidenceCount":32},[107],{"id":109,"slug":110,"name":111,"pathWithNamespace":112,"versions":193,"evidenceCount":32},[114],[195],{"id":92,"slug":196,"dossier":46,"summary":197,"aliases":198,"sourceIds":200,"published":201,"modified":202,"checkedAt":7,"severity":203,"references":207,"versionKeys":220,"packageCount":32,"repositoryCount":88},"ghsa-vvw2-h478-xwr3-e8568ce6","DSPy does not properly restrict file reads",[199,125],"CVE-2025-12695",[92,125],"2025-11-04T15:31:35Z","2026-07-07T17:57:24.503135806Z",[204],{"type":205,"score":206},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[208,211,213,216,218],{"type":209,"url":210},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12695",{"type":212,"url":146},"PACKAGE",{"type":214,"url":215},"WEB","https:\u002F\u002Fresearch.jfrog.com\u002Fvulnerabilities\u002Fdspy-sandbox-escape-arbitrary-file-read-jfsa-2025-001495652",{"type":212,"url":217},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdspy",{"type":209,"url":219},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vvw2-h478-xwr3",[182,176,169],1784558564997]