[{"data":1,"prerenderedAt":525},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-setuptools-fe37c31a":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":313,"related":405},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"paket",{"id":79,"slug":80,"identity":81,"ecosystem":82,"name":83,"label":83,"category":84,"aiRelevant":46,"provider":84,"repositoryCount":85,"occurrenceCount":86,"directRepositoryCount":38,"versionCount":87,"licenseExpressions":88,"advisoryIds":90,"advisoryCount":94,"verifiedAttestation":46,"repositories":95,"versions":184},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","pypi","setuptools",null,13,15,9,[89],"MIT",[91,92,93],"GHSA-5rjg-fvgr-3xxf","GHSA-cx63-2mw6-8hw5","PYSEC-2026-3447",3,[96,105,112,119,126,133,139,145,151,158,165,172,178],{"id":97,"slug":98,"name":99,"pathWithNamespace":100,"versions":101,"evidenceCount":104},"opencode:10162","opencode-10162","SmartPlanAI Anwendung","sh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung",[102,103],"80.9.0","82.0.1",2,{"id":106,"slug":107,"name":108,"pathWithNamespace":109,"versions":110,"evidenceCount":104},"opencode:5142","opencode-5142","strahlenexposition","uba-ki-lab\u002Fstrahlenexposition",[111],"80.0.1",{"id":113,"slug":114,"name":115,"pathWithNamespace":116,"versions":117,"evidenceCount":32},"opencode:6174","opencode-6174","Energieautarkes Wohnquartier - Backend","energieautarkes-wohnquartier\u002Fbackend",[118],"80.4.0",{"id":120,"slug":121,"name":122,"pathWithNamespace":123,"versions":124,"evidenceCount":32},"opencode:3608","opencode-3608","AI","iqsh\u002Fcollaboration-online-board\u002Fai",[125],"69.2.0",{"id":127,"slug":128,"name":129,"pathWithNamespace":130,"versions":131,"evidenceCount":32},"opencode:7674","opencode-7674","Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation",[132],"79.0.1",{"id":134,"slug":135,"name":136,"pathWithNamespace":137,"versions":138,"evidenceCount":32},"opencode:9998","opencode-9998","density-maps","uba-ki-lab\u002Fdensity-maps",[103],{"id":140,"slug":141,"name":142,"pathWithNamespace":143,"versions":144,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[102],{"id":146,"slug":147,"name":148,"pathWithNamespace":149,"versions":150,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[132],{"id":152,"slug":153,"name":154,"pathWithNamespace":155,"versions":156,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[157],"80.3.1",{"id":159,"slug":160,"name":161,"pathWithNamespace":162,"versions":163,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[164],"75.8.0",{"id":166,"slug":167,"name":168,"pathWithNamespace":169,"versions":170,"evidenceCount":32},"opencode:5201","opencode-5201","photovoltaic_systems","uba-ki-lab\u002Fphotovoltaic_systems",[171],"80.8.0",{"id":173,"slug":174,"name":175,"pathWithNamespace":176,"versions":177,"evidenceCount":32},"opencode:10775","opencode-10775","Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision",[102],{"id":179,"slug":180,"name":181,"pathWithNamespace":182,"versions":183,"evidenceCount":32},"opencode:7811","opencode-7811","Retrieval Evaluation","uba-ki-lab\u002Fretrieval-evaluation",[102],[185,209,222,235,248,261,274,287,300],{"version":125,"repositoryCount":32,"occurrenceCount":32,"ageDays":186,"advisoryIds":187,"metadata":188},859,[91,92,93],{"state":189,"checkedAt":190,"publishedAt":191,"deprecated":46,"deprecatedReason":84,"licenses":192,"advisoryIds":193,"links":196,"relatedProjects":203,"attestations":207,"verifiedAttestation":46,"projectStatus":208},"resolved","2026-07-20T03:19:50.101Z","2024-03-13T11:20:54Z",[89],[91,92,194,195,93],"PYSEC-2025-49","PYSEC-2026-1918",[197,200],{"label":198,"url":199},"DOCUMENTATION","https:\u002F\u002Fsetuptools.pypa.io\u002F",{"label":201,"url":202},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",[204],{"id":205,"relationType":201,"relationProvenance":206},"github.com\u002Fpypa\u002Fsetuptools","UNVERIFIED_METADATA",[],"active",{"version":164,"repositoryCount":32,"occurrenceCount":32,"ageDays":210,"advisoryIds":211,"metadata":212},557,[91,93],{"state":189,"checkedAt":190,"publishedAt":213,"deprecated":46,"deprecatedReason":84,"licenses":214,"advisoryIds":215,"links":216,"relatedProjects":219,"attestations":221,"verifiedAttestation":46,"projectStatus":208},"2025-01-08T18:28:20Z",[89],[91,194,93],[217,218],{"label":198,"url":199},{"label":201,"url":202},[220],{"id":205,"relationType":201,"relationProvenance":206},[],{"version":132,"repositoryCount":104,"occurrenceCount":104,"ageDays":223,"advisoryIds":224,"metadata":225},452,[93],{"state":189,"checkedAt":190,"publishedAt":226,"deprecated":46,"deprecatedReason":84,"licenses":227,"advisoryIds":228,"links":229,"relatedProjects":232,"attestations":234,"verifiedAttestation":46,"projectStatus":208},"2025-04-23T22:20:56Z",[],[93],[230,231],{"label":201,"url":202},{"label":198,"url":199},[233],{"id":205,"relationType":201,"relationProvenance":206},[],{"version":111,"repositoryCount":32,"occurrenceCount":104,"ageDays":236,"advisoryIds":237,"metadata":238},446,[93],{"state":189,"checkedAt":190,"publishedAt":239,"deprecated":46,"deprecatedReason":84,"licenses":240,"advisoryIds":241,"links":242,"relatedProjects":245,"attestations":247,"verifiedAttestation":46,"projectStatus":208},"2025-04-30T01:41:09Z",[],[93],[243,244],{"label":198,"url":199},{"label":201,"url":202},[246],{"id":205,"relationType":201,"relationProvenance":206},[],{"version":157,"repositoryCount":32,"occurrenceCount":32,"ageDays":249,"advisoryIds":250,"metadata":251},441,[93],{"state":189,"checkedAt":190,"publishedAt":252,"deprecated":46,"deprecatedReason":84,"licenses":253,"advisoryIds":254,"links":255,"relatedProjects":258,"attestations":260,"verifiedAttestation":46,"projectStatus":208},"2025-05-04T18:47:02Z",[89],[93],[256,257],{"label":201,"url":202},{"label":198,"url":199},[259],{"id":205,"relationType":201,"relationProvenance":206},[],{"version":118,"repositoryCount":32,"occurrenceCount":32,"ageDays":262,"advisoryIds":263,"metadata":264},436,[93],{"state":189,"checkedAt":190,"publishedAt":265,"deprecated":46,"deprecatedReason":84,"licenses":266,"advisoryIds":267,"links":268,"relatedProjects":271,"attestations":273,"verifiedAttestation":46,"projectStatus":208},"2025-05-09T20:42:25Z",[89],[93],[269,270],{"label":201,"url":202},{"label":198,"url":199},[272],{"id":205,"relationType":201,"relationProvenance":206},[],{"version":171,"repositoryCount":32,"occurrenceCount":32,"ageDays":275,"advisoryIds":276,"metadata":277},426,[93],{"state":189,"checkedAt":190,"publishedAt":278,"deprecated":46,"deprecatedReason":84,"licenses":279,"advisoryIds":280,"links":281,"relatedProjects":284,"attestations":286,"verifiedAttestation":46,"projectStatus":208},"2025-05-20T14:02:51Z",[89],[93],[282,283],{"label":198,"url":199},{"label":201,"url":202},[285],{"id":205,"relationType":201,"relationProvenance":206},[],{"version":102,"repositoryCount":34,"occurrenceCount":34,"ageDays":288,"advisoryIds":289,"metadata":290},419,[93],{"state":189,"checkedAt":190,"publishedAt":291,"deprecated":46,"deprecatedReason":84,"licenses":292,"advisoryIds":293,"links":294,"relatedProjects":297,"attestations":299,"verifiedAttestation":46,"projectStatus":208},"2025-05-27T00:56:49Z",[89],[93],[295,296],{"label":198,"url":199},{"label":201,"url":202},[298],{"id":205,"relationType":201,"relationProvenance":206},[],{"version":103,"repositoryCount":104,"occurrenceCount":104,"ageDays":301,"advisoryIds":302,"metadata":303},133,[93],{"state":189,"checkedAt":190,"publishedAt":304,"deprecated":46,"deprecatedReason":84,"licenses":305,"advisoryIds":306,"links":307,"relatedProjects":310,"attestations":312,"verifiedAttestation":46,"projectStatus":208},"2026-03-09T12:47:15Z",[89],[93],[308,309],{"label":198,"url":199},{"label":201,"url":202},[311],{"id":205,"relationType":201,"relationProvenance":206},[],{"occurrences":314,"occurrenceCount":86},[315,323,330,336,343,349,354,360,366,374,379,384,391,395,401],{"id":316,"repositoryId":120,"repositorySlug":121,"repositoryName":122,"repositoryPathWithNamespace":123,"ecosystem":82,"name":83,"identity":81,"version":125,"versionKey":317,"direct":84,"development":84,"sourceKind":318,"filePath":319,"blobSha":320,"sourceUrl":321,"commitSha":322},"component:da02d606564297d56e420984","pypi:setuptools@69.2.0","spdx-yaml","SPDX_v2.0.0.yml","e9e46566a2217346214d08f9dede99d8821b3c68","https:\u002F\u002Fgitlab.opencode.de\u002Fiqsh\u002Fcollaboration-online-board\u002Fai\u002F-\u002Fblob\u002F7cc4cbe5064bc5ede2426caf6981c5e9d0509327\u002FSPDX_v2.0.0.yml","7cc4cbe5064bc5ede2426caf6981c5e9d0509327",{"id":324,"repositoryId":127,"repositorySlug":128,"repositoryName":129,"repositoryPathWithNamespace":130,"ecosystem":82,"name":83,"identity":81,"version":132,"versionKey":325,"direct":84,"development":84,"sourceKind":326,"filePath":55,"blobSha":327,"sourceUrl":328,"commitSha":329},"component:982259c55798b0260522e23b","pypi:setuptools@79.0.1","uv-lock","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32",{"id":331,"repositoryId":134,"repositorySlug":135,"repositoryName":136,"repositoryPathWithNamespace":137,"ecosystem":82,"name":83,"identity":81,"version":103,"versionKey":332,"direct":84,"development":84,"sourceKind":326,"filePath":55,"blobSha":333,"sourceUrl":334,"commitSha":335},"component:089719d557db7b7f139564bd","pypi:setuptools@82.0.1","fa64e230fe01c25e6d465e090acbed3d4d86a694","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fdensity-maps\u002F-\u002Fblob\u002F1da30304236d86dfb376a429b1ea6e9fddba3a0a\u002Fuv.lock","1da30304236d86dfb376a429b1ea6e9fddba3a0a",{"id":337,"repositoryId":113,"repositorySlug":114,"repositoryName":115,"repositoryPathWithNamespace":116,"ecosystem":82,"name":83,"identity":81,"version":118,"versionKey":338,"direct":84,"development":46,"sourceKind":339,"filePath":56,"blobSha":340,"sourceUrl":341,"commitSha":342},"component:bd5b9a8d483ceea5ed8b349e","pypi:setuptools@80.4.0","poetry-lock","dc5008ef9fba69d70ea9e7b3fea21265fa5ef93d","https:\u002F\u002Fgitlab.opencode.de\u002Fenergieautarkes-wohnquartier\u002Fbackend\u002F-\u002Fblob\u002Ffc7e24cd546449ac9fdee4ad78aab861e0c89666\u002Fpoetry.lock","fc7e24cd546449ac9fdee4ad78aab861e0c89666",{"id":344,"repositoryId":140,"repositorySlug":141,"repositoryName":142,"repositoryPathWithNamespace":143,"ecosystem":82,"name":83,"identity":81,"version":102,"versionKey":345,"direct":84,"development":84,"sourceKind":326,"filePath":55,"blobSha":346,"sourceUrl":347,"commitSha":348},"component:ce2c1e2bc99563220ca77bb1","pypi:setuptools@80.9.0","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":350,"repositoryId":146,"repositorySlug":147,"repositoryName":148,"repositoryPathWithNamespace":149,"ecosystem":82,"name":83,"identity":81,"version":132,"versionKey":325,"direct":84,"development":84,"sourceKind":326,"filePath":55,"blobSha":351,"sourceUrl":352,"commitSha":353},"component:cc0743e6684501e7e8d27dd5","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":355,"repositoryId":152,"repositorySlug":153,"repositoryName":154,"repositoryPathWithNamespace":155,"ecosystem":82,"name":83,"identity":81,"version":157,"versionKey":356,"direct":84,"development":84,"sourceKind":326,"filePath":55,"blobSha":357,"sourceUrl":358,"commitSha":359},"component:5cf247059ef975243562fd16","pypi:setuptools@80.3.1","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"id":361,"repositoryId":159,"repositorySlug":160,"repositoryName":161,"repositoryPathWithNamespace":162,"ecosystem":82,"name":83,"identity":81,"version":164,"versionKey":362,"direct":84,"development":84,"sourceKind":326,"filePath":55,"blobSha":363,"sourceUrl":364,"commitSha":365},"component:2c474fd2c179b6fe0e90e302","pypi:setuptools@75.8.0","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"id":367,"repositoryId":166,"repositorySlug":167,"repositoryName":168,"repositoryPathWithNamespace":169,"ecosystem":82,"name":83,"identity":81,"version":171,"versionKey":368,"direct":84,"development":84,"sourceKind":369,"filePath":370,"blobSha":371,"sourceUrl":372,"commitSha":373},"component:57453107e5b6b9425535d964","pypi:setuptools@80.8.0","sbom-json","sbom.json","90b7d669fbf37c00e7bd5bf4e73a60e7eb78927e","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fphotovoltaic_systems\u002F-\u002Fblob\u002Fd0ec9137f2985f323b9aad141d83c47d14c64cce\u002Fsbom.json","d0ec9137f2985f323b9aad141d83c47d14c64cce",{"id":375,"repositoryId":173,"repositorySlug":174,"repositoryName":175,"repositoryPathWithNamespace":176,"ecosystem":82,"name":83,"identity":81,"version":102,"versionKey":345,"direct":84,"development":84,"sourceKind":326,"filePath":55,"blobSha":376,"sourceUrl":377,"commitSha":378},"component:4d1740f13ba879bfb432903a","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae",{"id":380,"repositoryId":179,"repositorySlug":180,"repositoryName":181,"repositoryPathWithNamespace":182,"ecosystem":82,"name":83,"identity":81,"version":102,"versionKey":345,"direct":84,"development":84,"sourceKind":326,"filePath":55,"blobSha":381,"sourceUrl":382,"commitSha":383},"component:ac1c191c5a103f280020be23","20c0181bf785c3e980512ba2de16e0fe3f207bad","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fretrieval-evaluation\u002F-\u002Fblob\u002Ff64bf528432908908d92b8263d6933301033bb7f\u002Fuv.lock","f64bf528432908908d92b8263d6933301033bb7f",{"id":385,"repositoryId":97,"repositorySlug":98,"repositoryName":99,"repositoryPathWithNamespace":100,"ecosystem":82,"name":83,"identity":81,"version":102,"versionKey":345,"direct":84,"development":386,"sourceKind":339,"filePath":387,"blobSha":388,"sourceUrl":389,"commitSha":390},"component:558d7f3b8f49a1ffe11b5898",true,"blp_streamlit_pipeline\u002Fsrc\u002Fext\u002Fstreamlit-draw-image-mask\u002Fpoetry.lock","40fa29ec0b8e6e3bfbf4c2ff77526dd4038e0299","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fblob\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f\u002Fblp_streamlit_pipeline\u002Fsrc\u002Fext\u002Fstreamlit-draw-image-mask\u002Fpoetry.lock","1d70807d48a8fae19711b10422c3417ab5d05d0f",{"id":392,"repositoryId":97,"repositorySlug":98,"repositoryName":99,"repositoryPathWithNamespace":100,"ecosystem":82,"name":83,"identity":81,"version":103,"versionKey":332,"direct":84,"development":46,"sourceKind":339,"filePath":56,"blobSha":393,"sourceUrl":394,"commitSha":390},"component:10a1eff4d897d6778270575b","6b17710ca48cf83827a909c320d60853c75d7960","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fblob\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f\u002Fpoetry.lock",{"id":396,"repositoryId":106,"repositorySlug":107,"repositoryName":108,"repositoryPathWithNamespace":109,"ecosystem":82,"name":83,"identity":81,"version":111,"versionKey":397,"direct":84,"development":46,"sourceKind":339,"filePath":56,"blobSha":398,"sourceUrl":399,"commitSha":400},"component:1d27536e9aa0023b5534ae37","pypi:setuptools@80.0.1","681193f56a8b37b97336b2682fc1147ac3bdab1f","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fblob\u002F1dd9cd8ca823a7998b729adce6957848cf241d54\u002Fpoetry.lock","1dd9cd8ca823a7998b729adce6957848cf241d54",{"id":402,"repositoryId":106,"repositorySlug":107,"repositoryName":108,"repositoryPathWithNamespace":109,"ecosystem":82,"name":83,"identity":81,"version":111,"versionKey":397,"direct":84,"development":84,"sourceKind":369,"filePath":370,"blobSha":403,"sourceUrl":404,"commitSha":400},"component:e44db96c7d96bfcbe7d1af82","bce3149701e5462f1af80e9221c0e2967402d606","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fblob\u002F1dd9cd8ca823a7998b729adce6957848cf241d54\u002Fsbom.json",{"repositories":406,"vulnerabilities":433},[407,409,411,413,415,417,419,421,423,425,427,429,431],{"id":97,"slug":98,"name":99,"pathWithNamespace":100,"versions":408,"evidenceCount":104},[102,103],{"id":106,"slug":107,"name":108,"pathWithNamespace":109,"versions":410,"evidenceCount":104},[111],{"id":113,"slug":114,"name":115,"pathWithNamespace":116,"versions":412,"evidenceCount":32},[118],{"id":120,"slug":121,"name":122,"pathWithNamespace":123,"versions":414,"evidenceCount":32},[125],{"id":127,"slug":128,"name":129,"pathWithNamespace":130,"versions":416,"evidenceCount":32},[132],{"id":134,"slug":135,"name":136,"pathWithNamespace":137,"versions":418,"evidenceCount":32},[103],{"id":140,"slug":141,"name":142,"pathWithNamespace":143,"versions":420,"evidenceCount":32},[102],{"id":146,"slug":147,"name":148,"pathWithNamespace":149,"versions":422,"evidenceCount":32},[132],{"id":152,"slug":153,"name":154,"pathWithNamespace":155,"versions":424,"evidenceCount":32},[157],{"id":159,"slug":160,"name":161,"pathWithNamespace":162,"versions":426,"evidenceCount":32},[164],{"id":166,"slug":167,"name":168,"pathWithNamespace":169,"versions":428,"evidenceCount":32},[171],{"id":173,"slug":174,"name":175,"pathWithNamespace":176,"versions":430,"evidenceCount":32},[102],{"id":179,"slug":180,"name":181,"pathWithNamespace":182,"versions":432,"evidenceCount":32},[102],[434,474,505],{"id":91,"slug":435,"dossier":46,"summary":436,"aliases":437,"sourceIds":440,"published":441,"modified":442,"checkedAt":7,"severity":443,"references":450,"versionKeys":473,"packageCount":32,"repositoryCount":104},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[438,439,194],"BIT-setuptools-2025-47273","CVE-2025-47273",[91,194],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[444,447],{"type":445,"score":446},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":448,"score":449},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[451,454,457,460,463,466,468,470],{"type":452,"url":453},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":455,"url":456},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":458,"url":459},"REPORT","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":461,"url":462},"FIX","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":464,"url":465},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":467,"url":202},"PACKAGE",{"type":464,"url":469},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":471,"url":472},"ARTICLE","https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[317,362],{"id":92,"slug":475,"dossier":46,"summary":476,"aliases":477,"sourceIds":480,"published":481,"modified":482,"checkedAt":7,"severity":483,"references":488,"versionKeys":504,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[478,479,195],"BIT-setuptools-2024-6345","CVE-2024-6345",[92,195],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[484,486],{"type":448,"score":485},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":445,"score":487},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[489,491,493,495,496,498,500,502],{"type":455,"url":490},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":464,"url":492},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":464,"url":494},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":467,"url":202},{"type":464,"url":497},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":464,"url":499},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":467,"url":501},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":455,"url":503},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[317],{"id":93,"slug":506,"dossier":386,"summary":84,"aliases":507,"sourceIds":511,"published":512,"modified":513,"checkedAt":7,"severity":514,"references":517,"versionKeys":524,"packageCount":32,"repositoryCount":85},"pysec-2026-3447-df031425",[508,509,510],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[93],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[515],{"type":448,"score":516},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[518,520,522],{"type":455,"url":519},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":461,"url":521},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":452,"url":523},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[317,362,325,397,356,338,368,345,332],1784558563278]