{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-08-13T03:52:27.520Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-08-13T03:50:55.687Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":31,"completeTreeCount":30,"incompleteTreeCount":1,"lockfileRepositoryCount":18,"sbomRepositoryCount":4,"artifactRepositoryCount":21,"resolvedRepositoryCount":30,"resolvedArtifactRepositoryCount":21,"dependencyFileCount":32,"parsedFileCount":31,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":3642,"metadataResolvedCount":3632,"metadataNotFoundCount":10,"osvEvaluatedVersionCount":3642,"codeRadarRepositoryCount":31},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":8000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":31,"packageCount":2274,"aiPackageCount":44,"resolvedComponentCount":5994,"resolvedVersionCount":3642,"providerExposureRepositoryCount":6,"licenseExpressionCount":53,"knownLicensePackageCount":2244,"unknownLicensePackageCount":30,"advisoryCount":640,"matchedAdvisoryRepositoryCount":26,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":19,"repositoryShare":0.6129032258064516}},"kind":"paket","entity":{"id":"package:npm:@huggingface/transformers","slug":"huggingface-transformers-cf1f05d0","identity":"npm:@huggingface/transformers","ecosystem":"npm","name":"@huggingface/transformers","label":"Transformers.js","category":"model-runtime","aiRelevant":true,"provider":{"id":"hugging-face","label":"Hugging Face"},"repositoryCount":1,"occurrenceCount":1,"directRepositoryCount":1,"versionCount":1,"licenseExpressions":["Apache-2.0"],"advisoryIds":[],"advisoryCount":0,"verifiedAttestation":false,"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["4.2.0"],"evidenceCount":1}],"versions":[{"version":"4.2.0","repositoryCount":1,"occurrenceCount":1,"ageDays":112,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2026-04-22T16:28:41Z","deprecated":false,"deprecatedReason":null,"licenses":["Apache-2.0"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://github.com/huggingface/transformers.js#readme"},{"label":"ISSUE_TRACKER","url":"https://github.com/huggingface/transformers.js/issues"},{"label":"ORIGIN","url":"https://registry.npmjs.org/@huggingface%2Ftransformers/4.2.0"}],"relatedProjects":[{"id":"github.com/huggingface/transformers.js","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/huggingface/transformers.js","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":null}}]},"evidence":{"occurrences":[{"id":"component:4ad807fae66a3f519ff31766","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"npm","name":"@huggingface/transformers","identity":"npm:@huggingface/transformers","version":"4.2.0","versionKey":"npm:@huggingface/transformers@4.2.0","direct":true,"development":false,"sourceKind":"npm-lock","filePath":"mucgpt-frontend/package-lock.json","blobSha":"6caada395b7541a6d878329048e9256634dd2832","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/4d053562adec8962a8e523b7ed27b48a9f882d60/mucgpt-frontend/package-lock.json","commitSha":"4d053562adec8962a8e523b7ed27b48a9f882d60"}],"occurrenceCount":1},"related":{"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["4.2.0"],"evidenceCount":1}],"vulnerabilities":[]}}