[{"data":1,"prerenderedAt":353},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-fonttools-d2488ea8":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":248,"related":305},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"paket",{"id":79,"slug":80,"identity":81,"ecosystem":82,"name":83,"label":83,"category":84,"aiRelevant":46,"provider":84,"repositoryCount":85,"occurrenceCount":86,"directRepositoryCount":38,"versionCount":65,"licenseExpressions":87,"advisoryIds":89,"advisoryCount":32,"verifiedAttestation":91,"repositories":92,"versions":149},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","pypi","fonttools",null,8,9,[88],"MIT",[90],"GHSA-768j-98cg-p3fv",true,[93,101,108,115,122,129,136,142],{"id":94,"slug":95,"name":96,"pathWithNamespace":97,"versions":98,"evidenceCount":100},"opencode:5142","opencode-5142","strahlenexposition","uba-ki-lab\u002Fstrahlenexposition",[99],"4.57.0",2,{"id":102,"slug":103,"name":104,"pathWithNamespace":105,"versions":106,"evidenceCount":32},"opencode:6174","opencode-6174","Energieautarkes Wohnquartier - Backend","energieautarkes-wohnquartier\u002Fbackend",[107],"4.58.0",{"id":109,"slug":110,"name":111,"pathWithNamespace":112,"versions":113,"evidenceCount":32},"opencode:10162","opencode-10162","SmartPlanAI Anwendung","sh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung",[114],"4.62.1",{"id":116,"slug":117,"name":118,"pathWithNamespace":119,"versions":120,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[121],"4.58.5",{"id":123,"slug":124,"name":125,"pathWithNamespace":126,"versions":127,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[128],"4.59.2",{"id":130,"slug":131,"name":132,"pathWithNamespace":133,"versions":134,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[135],"4.55.3",{"id":137,"slug":138,"name":139,"pathWithNamespace":140,"versions":141,"evidenceCount":32},"opencode:5201","opencode-5201","photovoltaic_systems","uba-ki-lab\u002Fphotovoltaic_systems",[107],{"id":143,"slug":144,"name":145,"pathWithNamespace":146,"versions":147,"evidenceCount":32},"opencode:10775","opencode-10775","Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision",[148],"4.61.1",[150,168,179,190,201,212,232],{"version":135,"repositoryCount":32,"occurrenceCount":32,"ageDays":151,"advisoryIds":152,"metadata":153},586,[90],{"state":154,"checkedAt":155,"publishedAt":156,"deprecated":46,"deprecatedReason":84,"licenses":157,"advisoryIds":158,"links":160,"relatedProjects":161,"attestations":166,"verifiedAttestation":46,"projectStatus":167},"resolved","2026-07-20T03:19:50.101Z","2024-12-10T21:39:22Z",[88],[90,159],"PYSEC-2026-1389",[],[162],{"id":163,"relationType":164,"relationProvenance":165},"github.com\u002Ffonttools\u002Ffonttools","SOURCE_REPO","UNVERIFIED_METADATA",[],"active",{"version":99,"repositoryCount":32,"occurrenceCount":100,"ageDays":169,"advisoryIds":170,"metadata":171},473,[90],{"state":154,"checkedAt":155,"publishedAt":172,"deprecated":46,"deprecatedReason":84,"licenses":173,"advisoryIds":174,"links":175,"relatedProjects":176,"attestations":178,"verifiedAttestation":46,"projectStatus":167},"2025-04-03T11:07:11Z",[88],[90,159],[],[177],{"id":163,"relationType":164,"relationProvenance":165},[],{"version":107,"repositoryCount":100,"occurrenceCount":100,"ageDays":180,"advisoryIds":181,"metadata":182},435,[90],{"state":154,"checkedAt":155,"publishedAt":183,"deprecated":46,"deprecatedReason":84,"licenses":184,"advisoryIds":185,"links":186,"relatedProjects":187,"attestations":189,"verifiedAttestation":46,"projectStatus":167},"2025-05-10T17:36:33Z",[88],[90,159],[],[188],{"id":163,"relationType":164,"relationProvenance":165},[],{"version":121,"repositoryCount":32,"occurrenceCount":32,"ageDays":191,"advisoryIds":192,"metadata":193},382,[90],{"state":154,"checkedAt":155,"publishedAt":194,"deprecated":46,"deprecatedReason":84,"licenses":195,"advisoryIds":196,"links":197,"relatedProjects":198,"attestations":200,"verifiedAttestation":46,"projectStatus":167},"2025-07-03T14:04:45Z",[88],[90,159],[],[199],{"id":163,"relationType":164,"relationProvenance":165},[],{"version":128,"repositoryCount":32,"occurrenceCount":32,"ageDays":202,"advisoryIds":203,"metadata":204},326,[90],{"state":154,"checkedAt":155,"publishedAt":205,"deprecated":46,"deprecatedReason":84,"licenses":206,"advisoryIds":207,"links":208,"relatedProjects":209,"attestations":211,"verifiedAttestation":46,"projectStatus":167},"2025-08-27T16:39:42Z",[88],[90,159],[],[210],{"id":163,"relationType":164,"relationProvenance":165},[],{"version":148,"repositoryCount":32,"occurrenceCount":32,"ageDays":213,"advisoryIds":214,"metadata":215},219,[],{"state":154,"checkedAt":155,"publishedAt":216,"deprecated":46,"deprecatedReason":84,"licenses":217,"advisoryIds":218,"links":219,"relatedProjects":223,"attestations":227,"verifiedAttestation":91,"projectStatus":167},"2025-12-12T17:30:47Z",[88],[],[220],{"label":221,"url":222},"ATTESTATION","https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ffonttools\u002F4.61.1\u002Ffonttools-4.61.1-cp314-cp314-manylinux1_x86_64.manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_5_x86_64.whl\u002Fprovenance",[224,225],{"id":163,"relationType":164,"relationProvenance":165},{"id":163,"relationType":164,"relationProvenance":226},"PYPI_PUBLISH_ATTESTATION",[228],{"type":229,"url":222,"verified":91,"sourceRepository":230,"commit":231},"https:\u002F\u002Fdocs.pypi.org\u002Fattestations\u002Fpublish\u002Fv1","https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools","0a6517921cb779fef919a5e2cbc1a01e77375ced",{"version":114,"repositoryCount":32,"occurrenceCount":32,"ageDays":233,"advisoryIds":234,"metadata":235},129,[],{"state":154,"checkedAt":155,"publishedAt":236,"deprecated":46,"deprecatedReason":84,"licenses":237,"advisoryIds":238,"links":239,"relatedProjects":242,"attestations":245,"verifiedAttestation":91,"projectStatus":167},"2026-03-13T13:53:45Z",[88],[],[240],{"label":221,"url":241},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ffonttools\u002F4.62.1\u002Ffonttools-4.62.1-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\u002Fprovenance",[243,244],{"id":163,"relationType":164,"relationProvenance":165},{"id":163,"relationType":164,"relationProvenance":226},[246],{"type":229,"url":241,"verified":91,"sourceRepository":230,"commit":247},"da54a2924009c9a6497dad23f4a6be4a96a8b0e7",{"occurrences":249,"occurrenceCount":86},[250,257,264,270,276,283,289,295,301],{"id":251,"repositoryId":102,"repositorySlug":103,"repositoryName":104,"repositoryPathWithNamespace":105,"ecosystem":82,"name":83,"identity":81,"version":107,"versionKey":252,"direct":84,"development":46,"sourceKind":253,"filePath":56,"blobSha":254,"sourceUrl":255,"commitSha":256},"component:9d0ed4590d410bd37aeab076","pypi:fonttools@4.58.0","poetry-lock","dc5008ef9fba69d70ea9e7b3fea21265fa5ef93d","https:\u002F\u002Fgitlab.opencode.de\u002Fenergieautarkes-wohnquartier\u002Fbackend\u002F-\u002Fblob\u002Ffc7e24cd546449ac9fdee4ad78aab861e0c89666\u002Fpoetry.lock","fc7e24cd546449ac9fdee4ad78aab861e0c89666",{"id":258,"repositoryId":116,"repositorySlug":117,"repositoryName":118,"repositoryPathWithNamespace":119,"ecosystem":82,"name":83,"identity":81,"version":121,"versionKey":259,"direct":84,"development":84,"sourceKind":260,"filePath":55,"blobSha":261,"sourceUrl":262,"commitSha":263},"component:8267e405449b7802188ad126","pypi:fonttools@4.58.5","uv-lock","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":265,"repositoryId":123,"repositorySlug":124,"repositoryName":125,"repositoryPathWithNamespace":126,"ecosystem":82,"name":83,"identity":81,"version":128,"versionKey":266,"direct":84,"development":84,"sourceKind":260,"filePath":55,"blobSha":267,"sourceUrl":268,"commitSha":269},"component:a9b65e46e7454e88000b6e20","pypi:fonttools@4.59.2","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":271,"repositoryId":130,"repositorySlug":131,"repositoryName":132,"repositoryPathWithNamespace":133,"ecosystem":82,"name":83,"identity":81,"version":135,"versionKey":272,"direct":84,"development":84,"sourceKind":260,"filePath":55,"blobSha":273,"sourceUrl":274,"commitSha":275},"component:e7d2aebb16a3c6ec5aa6b4e4","pypi:fonttools@4.55.3","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"id":277,"repositoryId":137,"repositorySlug":138,"repositoryName":139,"repositoryPathWithNamespace":140,"ecosystem":82,"name":83,"identity":81,"version":107,"versionKey":252,"direct":84,"development":84,"sourceKind":278,"filePath":279,"blobSha":280,"sourceUrl":281,"commitSha":282},"component:d97a0a90bc2307014b711dfd","sbom-json","sbom.json","90b7d669fbf37c00e7bd5bf4e73a60e7eb78927e","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fphotovoltaic_systems\u002F-\u002Fblob\u002Fd0ec9137f2985f323b9aad141d83c47d14c64cce\u002Fsbom.json","d0ec9137f2985f323b9aad141d83c47d14c64cce",{"id":284,"repositoryId":143,"repositorySlug":144,"repositoryName":145,"repositoryPathWithNamespace":146,"ecosystem":82,"name":83,"identity":81,"version":148,"versionKey":285,"direct":84,"development":84,"sourceKind":260,"filePath":55,"blobSha":286,"sourceUrl":287,"commitSha":288},"component:99dfc957d7463a6d88a0c253","pypi:fonttools@4.61.1","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae",{"id":290,"repositoryId":109,"repositorySlug":110,"repositoryName":111,"repositoryPathWithNamespace":112,"ecosystem":82,"name":83,"identity":81,"version":114,"versionKey":291,"direct":84,"development":46,"sourceKind":253,"filePath":56,"blobSha":292,"sourceUrl":293,"commitSha":294},"component:c8044fa80d899ac77cfda62d","pypi:fonttools@4.62.1","6b17710ca48cf83827a909c320d60853c75d7960","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fblob\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f\u002Fpoetry.lock","1d70807d48a8fae19711b10422c3417ab5d05d0f",{"id":296,"repositoryId":94,"repositorySlug":95,"repositoryName":96,"repositoryPathWithNamespace":97,"ecosystem":82,"name":83,"identity":81,"version":99,"versionKey":297,"direct":84,"development":46,"sourceKind":253,"filePath":56,"blobSha":298,"sourceUrl":299,"commitSha":300},"component:76d726c75515765db12a6413","pypi:fonttools@4.57.0","681193f56a8b37b97336b2682fc1147ac3bdab1f","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fblob\u002F1dd9cd8ca823a7998b729adce6957848cf241d54\u002Fpoetry.lock","1dd9cd8ca823a7998b729adce6957848cf241d54",{"id":302,"repositoryId":94,"repositorySlug":95,"repositoryName":96,"repositoryPathWithNamespace":97,"ecosystem":82,"name":83,"identity":81,"version":99,"versionKey":297,"direct":84,"development":84,"sourceKind":278,"filePath":279,"blobSha":303,"sourceUrl":304,"commitSha":300},"component:7c0322d8a48afa757cf77eac","bce3149701e5462f1af80e9221c0e2967402d606","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fblob\u002F1dd9cd8ca823a7998b729adce6957848cf241d54\u002Fsbom.json",{"repositories":306,"vulnerabilities":323},[307,309,311,313,315,317,319,321],{"id":94,"slug":95,"name":96,"pathWithNamespace":97,"versions":308,"evidenceCount":100},[99],{"id":102,"slug":103,"name":104,"pathWithNamespace":105,"versions":310,"evidenceCount":32},[107],{"id":109,"slug":110,"name":111,"pathWithNamespace":112,"versions":312,"evidenceCount":32},[114],{"id":116,"slug":117,"name":118,"pathWithNamespace":119,"versions":314,"evidenceCount":32},[121],{"id":123,"slug":124,"name":125,"pathWithNamespace":126,"versions":316,"evidenceCount":32},[128],{"id":130,"slug":131,"name":132,"pathWithNamespace":133,"versions":318,"evidenceCount":32},[135],{"id":137,"slug":138,"name":139,"pathWithNamespace":140,"versions":320,"evidenceCount":32},[107],{"id":143,"slug":144,"name":145,"pathWithNamespace":146,"versions":322,"evidenceCount":32},[148],[324],{"id":90,"slug":325,"dossier":46,"summary":326,"aliases":327,"sourceIds":329,"published":330,"modified":331,"checkedAt":7,"severity":332,"references":336,"versionKeys":351,"packageCount":32,"repositoryCount":352},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[328,159],"CVE-2025-66034",[90,159],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[333],{"type":334,"score":335},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[337,340,343,345,347,349],{"type":338,"url":339},"WEB","https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":341,"url":342},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":338,"url":344},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":346,"url":230},"PACKAGE",{"type":346,"url":348},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":341,"url":350},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[272,297,252,259,266],6,1784558563933]