[{"data":1,"prerenderedAt":354},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-langgraph-6c1c645e":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":233,"related":285},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"paket",{"id":79,"slug":80,"identity":81,"ecosystem":82,"name":83,"label":84,"category":85,"aiRelevant":86,"provider":87,"repositoryCount":88,"occurrenceCount":89,"directRepositoryCount":90,"versionCount":88,"licenseExpressions":91,"advisoryIds":93,"advisoryCount":90,"verifiedAttestation":46,"repositories":96,"versions":138},"package:pypi:langgraph","langgraph-6c1c645e","pypi:langgraph","pypi","langgraph","LangGraph","agents",true,null,6,8,2,[92],"MIT",[94,95],"GHSA-g48c-2wqr-h844","GHSA-w39p-vh2g-g8g5",[97,105,110,117,124,131],{"id":98,"slug":99,"name":100,"pathWithNamespace":101,"versions":102,"evidenceCount":90},"opencode:5711","opencode-5711","Chat","f13\u002Fmicroservices\u002Fchat",[103,104],"1.2.4","1.2.7",{"id":106,"slug":107,"name":100,"pathWithNamespace":108,"versions":109,"evidenceCount":90},"opencode:11665","opencode-11665","oc000155135727\u002Fchat",[104],{"id":111,"slug":112,"name":113,"pathWithNamespace":114,"versions":115,"evidenceCount":32},"opencode:4609","opencode-4609","LLM_Workshop","bbsr_ida_public\u002Fllm_workshop",[116],"0.3.21",{"id":118,"slug":119,"name":120,"pathWithNamespace":121,"versions":122,"evidenceCount":32},"opencode:8742","opencode-8742","ai-websearch-benchmark","datenlabor-bmz\u002Fai-websearch-benchmark",[123],"1.0.6",{"id":125,"slug":126,"name":127,"pathWithNamespace":128,"versions":129,"evidenceCount":32},"opencode:4166","opencode-4166","ai-legal-graph","iorb\u002Fai-legal-graph",[130],"0.1.1",{"id":132,"slug":133,"name":134,"pathWithNamespace":135,"versions":136,"evidenceCount":32},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[137],"1.2.5",[139,160,172,191,205,219],{"version":130,"repositoryCount":32,"occurrenceCount":32,"ageDays":140,"advisoryIds":141,"metadata":142},758,[94,95],{"state":143,"checkedAt":144,"publishedAt":145,"deprecated":46,"deprecatedReason":87,"licenses":146,"advisoryIds":147,"links":150,"relatedProjects":154,"attestations":158,"verifiedAttestation":46,"projectStatus":159},"resolved","2026-07-20T03:19:50.101Z","2024-06-22T00:51:10Z",[92],[94,148,149],"PYSEC-2026-2194","PYSEC-2026-83",[151],{"label":152,"url":153},"SOURCE_REPO","https:\u002F\u002Fwww.github.com\u002Flangchain-ai\u002Flanggraph",[155],{"id":156,"relationType":152,"relationProvenance":157},"github.com\u002Flangchain-ai\u002Flanggraph","UNVERIFIED_METADATA",[],"active",{"version":116,"repositoryCount":32,"occurrenceCount":32,"ageDays":161,"advisoryIds":162,"metadata":163},479,[94],{"state":143,"checkedAt":144,"publishedAt":164,"deprecated":46,"deprecatedReason":87,"licenses":165,"advisoryIds":166,"links":167,"relatedProjects":169,"attestations":171,"verifiedAttestation":46,"projectStatus":159},"2025-03-27T15:49:43Z",[92],[94,149],[168],{"label":152,"url":153},[170],{"id":156,"relationType":152,"relationProvenance":157},[],{"version":123,"repositoryCount":32,"occurrenceCount":32,"ageDays":173,"advisoryIds":174,"metadata":175},188,[94],{"state":143,"checkedAt":144,"publishedAt":176,"deprecated":46,"deprecatedReason":87,"licenses":177,"advisoryIds":178,"links":179,"relatedProjects":188,"attestations":190,"verifiedAttestation":46,"projectStatus":159},"2026-01-12T20:33:29Z",[92],[94,149],[180,183,186],{"label":181,"url":182},"HOMEPAGE","https:\u002F\u002Fdocs.langchain.com\u002Foss\u002Fpython\u002Flanggraph\u002Foverview",{"label":184,"url":185},"DOCUMENTATION","https:\u002F\u002Freference.langchain.com\u002Fpython\u002Flanggraph\u002F",{"label":152,"url":187},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph",[189],{"id":156,"relationType":152,"relationProvenance":157},[],{"version":103,"repositoryCount":32,"occurrenceCount":32,"ageDays":192,"advisoryIds":193,"metadata":194},47,[],{"state":143,"checkedAt":144,"publishedAt":195,"deprecated":46,"deprecatedReason":87,"licenses":196,"advisoryIds":197,"links":198,"relatedProjects":202,"attestations":204,"verifiedAttestation":46,"projectStatus":159},"2026-06-02T17:07:35Z",[92],[],[199,200,201],{"label":181,"url":182},{"label":184,"url":185},{"label":152,"url":187},[203],{"id":156,"relationType":152,"relationProvenance":157},[],{"version":137,"repositoryCount":32,"occurrenceCount":32,"ageDays":206,"advisoryIds":207,"metadata":208},37,[],{"state":143,"checkedAt":144,"publishedAt":209,"deprecated":46,"deprecatedReason":87,"licenses":210,"advisoryIds":211,"links":212,"relatedProjects":216,"attestations":218,"verifiedAttestation":46,"projectStatus":159},"2026-06-12T20:30:57Z",[92],[],[213,214,215],{"label":181,"url":182},{"label":184,"url":185},{"label":152,"url":187},[217],{"id":156,"relationType":152,"relationProvenance":157},[],{"version":104,"repositoryCount":90,"occurrenceCount":220,"ageDays":35,"advisoryIds":221,"metadata":222},3,[],{"state":143,"checkedAt":144,"publishedAt":223,"deprecated":46,"deprecatedReason":87,"licenses":224,"advisoryIds":225,"links":226,"relatedProjects":230,"attestations":232,"verifiedAttestation":46,"projectStatus":159},"2026-06-30T01:24:11Z",[92],[],[227,228,229],{"label":181,"url":182},{"label":184,"url":185},{"label":152,"url":187},[231],{"id":156,"relationType":152,"relationProvenance":157},[],{"occurrences":234,"occurrenceCount":89},[235,243,250,257,263,267,271,278],{"id":236,"repositoryId":125,"repositorySlug":126,"repositoryName":127,"repositoryPathWithNamespace":128,"ecosystem":82,"name":83,"identity":81,"version":130,"versionKey":237,"direct":86,"development":46,"sourceKind":238,"filePath":239,"blobSha":240,"sourceUrl":241,"commitSha":242},"component:8d17b4d6f59bdf33d974566d","pypi:langgraph@0.1.1","exact-manifest-pin","requirements.txt","eb8e9a474c655bc81e1a5841cf757dec75775529","https:\u002F\u002Fgitlab.opencode.de\u002Fiorb\u002Fai-legal-graph\u002F-\u002Fblob\u002F8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be\u002Frequirements.txt","8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be",{"id":244,"repositoryId":118,"repositorySlug":119,"repositoryName":120,"repositoryPathWithNamespace":121,"ecosystem":82,"name":83,"identity":81,"version":123,"versionKey":245,"direct":87,"development":87,"sourceKind":246,"filePath":55,"blobSha":247,"sourceUrl":248,"commitSha":249},"component:d7ed0b97b0e6b5d9e993a8c1","pypi:langgraph@1.0.6","uv-lock","4f7b4e2e096e186e4408b529568676aa8c71ba55","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark\u002F-\u002Fblob\u002Fcd6b854b1b400d7e45796aaa22bded8183642916\u002Fuv.lock","cd6b854b1b400d7e45796aaa22bded8183642916",{"id":251,"repositoryId":98,"repositorySlug":99,"repositoryName":100,"repositoryPathWithNamespace":101,"ecosystem":82,"name":83,"identity":81,"version":103,"versionKey":252,"direct":46,"development":46,"sourceKind":238,"filePath":253,"blobSha":254,"sourceUrl":255,"commitSha":256},"component:35c95672707c8430498f4fb8","pypi:langgraph@1.2.4","requirements-dev.txt","cb5de92f20847716cb1365424c1487ef7737c5a3","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fchat\u002F-\u002Fblob\u002Fa93870fdf9bd76e9b0e5000a4c35906b58dc77d5\u002Frequirements-dev.txt","a93870fdf9bd76e9b0e5000a4c35906b58dc77d5",{"id":258,"repositoryId":106,"repositorySlug":107,"repositoryName":100,"repositoryPathWithNamespace":108,"ecosystem":82,"name":83,"identity":81,"version":104,"versionKey":259,"direct":46,"development":46,"sourceKind":238,"filePath":253,"blobSha":260,"sourceUrl":261,"commitSha":262},"component:6e340bf47e575eee1f4c117d","pypi:langgraph@1.2.7","fd14e62cdbbceb707e82de32261f078ce7e761e6","https:\u002F\u002Fgitlab.opencode.de\u002Foc000155135727\u002Fchat\u002F-\u002Fblob\u002F5a50523649346b69cc333b11dd289783f02c7a44\u002Frequirements-dev.txt","5a50523649346b69cc333b11dd289783f02c7a44",{"id":264,"repositoryId":106,"repositorySlug":107,"repositoryName":100,"repositoryPathWithNamespace":108,"ecosystem":82,"name":83,"identity":81,"version":104,"versionKey":259,"direct":46,"development":46,"sourceKind":238,"filePath":239,"blobSha":265,"sourceUrl":266,"commitSha":262},"component:eb66787e0c373ade56d6d75e","609077cf5528aa4d11e7334fbb27ee972681b7b2","https:\u002F\u002Fgitlab.opencode.de\u002Foc000155135727\u002Fchat\u002F-\u002Fblob\u002F5a50523649346b69cc333b11dd289783f02c7a44\u002Frequirements.txt",{"id":268,"repositoryId":98,"repositorySlug":99,"repositoryName":100,"repositoryPathWithNamespace":101,"ecosystem":82,"name":83,"identity":81,"version":104,"versionKey":259,"direct":46,"development":46,"sourceKind":238,"filePath":239,"blobSha":269,"sourceUrl":270,"commitSha":256},"component:e894690d357533e1b5243c77","a6eda97cd26e2e09417c240a3db1e9a304e099d2","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fchat\u002F-\u002Fblob\u002Fa93870fdf9bd76e9b0e5000a4c35906b58dc77d5\u002Frequirements.txt",{"id":272,"repositoryId":111,"repositorySlug":112,"repositoryName":113,"repositoryPathWithNamespace":114,"ecosystem":82,"name":83,"identity":81,"version":116,"versionKey":273,"direct":86,"development":46,"sourceKind":238,"filePath":274,"blobSha":275,"sourceUrl":276,"commitSha":277},"component:69d4c9f26a160b47e1488068","pypi:langgraph@0.3.21","docker\u002Frequirements.txt","0d707ff70a4c5b3584990d5380c8bf62c64284b5","https:\u002F\u002Fgitlab.opencode.de\u002Fbbsr_ida_public\u002Fllm_workshop\u002F-\u002Fblob\u002Ffddd886ab2fd3824e269d40cefde90cbed709201\u002Fdocker\u002Frequirements.txt","fddd886ab2fd3824e269d40cefde90cbed709201",{"id":279,"repositoryId":132,"repositorySlug":133,"repositoryName":134,"repositoryPathWithNamespace":135,"ecosystem":82,"name":83,"identity":81,"version":137,"versionKey":280,"direct":87,"development":87,"sourceKind":246,"filePath":281,"blobSha":282,"sourceUrl":283,"commitSha":284},"component:3656fe8f5facf8af5d86eca8","pypi:langgraph@1.2.5","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fmucgpt-core-service\u002Fuv.lock","46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8",{"repositories":286,"vulnerabilities":299},[287,289,291,293,295,297],{"id":98,"slug":99,"name":100,"pathWithNamespace":101,"versions":288,"evidenceCount":90},[103,104],{"id":106,"slug":107,"name":100,"pathWithNamespace":108,"versions":290,"evidenceCount":90},[104],{"id":111,"slug":112,"name":113,"pathWithNamespace":114,"versions":292,"evidenceCount":32},[116],{"id":118,"slug":119,"name":120,"pathWithNamespace":121,"versions":294,"evidenceCount":32},[123],{"id":125,"slug":126,"name":127,"pathWithNamespace":128,"versions":296,"evidenceCount":32},[130],{"id":132,"slug":133,"name":134,"pathWithNamespace":135,"versions":298,"evidenceCount":32},[137],[300,326],{"id":94,"slug":301,"dossier":46,"summary":302,"aliases":303,"sourceIds":305,"published":306,"modified":307,"checkedAt":7,"severity":308,"references":314,"versionKeys":325,"packageCount":32,"repositoryCount":220},"ghsa-g48c-2wqr-h844-48f35247","LangGraph checkpoint loading has unsafe msgpack deserialization",[304,149],"CVE-2026-28277",[94,149],"2026-03-05T20:16:15.677Z","2026-06-06T01:00:08.116125988Z",[309,312],{"type":310,"score":311},"CVSS_V3","CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":310,"score":313},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[315,318,320,322],{"type":316,"url":317},"ADVISORY","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-g48c-2wqr-h844",{"type":316,"url":319},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28277",{"type":321,"url":187},"PACKAGE",{"type":323,"url":324},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph\u002FPYSEC-2026-83.yaml",[237,273,245],{"id":95,"slug":327,"dossier":46,"summary":328,"aliases":329,"sourceIds":332,"published":333,"modified":334,"checkedAt":7,"severity":335,"references":340,"versionKeys":352,"packageCount":90,"repositoryCount":90},"ghsa-w39p-vh2g-g8g5-47880dfe","LangGraph SDK has unsafe URL path construction",[330,148,331],"CVE-2026-48776","PYSEC-2026-2575",[95,148,331],"2026-06-17T10:55:15.113Z","2026-07-13T16:42:27.619863658Z",[336,338],{"type":310,"score":337},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":310,"score":339},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[341,343,345,346,348,350],{"type":323,"url":342},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-w39p-vh2g-g8g5",{"type":316,"url":344},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48776",{"type":321,"url":187},{"type":323,"url":347},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Freleases\u002Ftag\u002Fsdk%3D%3D0.3.15",{"type":321,"url":349},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flanggraph-sdk",{"type":316,"url":351},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w39p-vh2g-g8g5",[353,237],"pypi:langgraph-sdk@0.3.3",1784558564242]