{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-08-12T14:25:03.090Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-08-12T14:23:04.538Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":31,"completeTreeCount":30,"incompleteTreeCount":1,"lockfileRepositoryCount":18,"sbomRepositoryCount":4,"artifactRepositoryCount":21,"resolvedRepositoryCount":30,"resolvedArtifactRepositoryCount":21,"dependencyFileCount":32,"parsedFileCount":31,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":3642,"metadataResolvedCount":3632,"metadataNotFoundCount":10,"osvEvaluatedVersionCount":3642,"codeRadarRepositoryCount":31},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":8000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":31,"packageCount":2274,"aiPackageCount":44,"resolvedComponentCount":5994,"resolvedVersionCount":3642,"providerExposureRepositoryCount":6,"licenseExpressionCount":53,"knownLicensePackageCount":2244,"unknownLicensePackageCount":30,"advisoryCount":640,"matchedAdvisoryRepositoryCount":26,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":19,"repositoryShare":0.6129032258064516}},"kind":"paket","entity":{"id":"package:pypi:langgraph","slug":"langgraph-6c1c645e","identity":"pypi:langgraph","ecosystem":"pypi","name":"langgraph","label":"LangGraph","category":"agents","aiRelevant":true,"provider":null,"repositoryCount":7,"occurrenceCount":9,"directRepositoryCount":2,"versionCount":7,"licenseExpressions":["MIT"],"advisoryIds":["GHSA-g48c-2wqr-h844","GHSA-w39p-vh2g-g8g5"],"advisoryCount":2,"verifiedAttestation":false,"repositories":[{"id":"opencode:5711","slug":"opencode-5711","name":"Chat","pathWithNamespace":"f13/microservices/chat","versions":["1.2.10"],"evidenceCount":2},{"id":"opencode:11665","slug":"opencode-11665","name":"Chat","pathWithNamespace":"oc000155135727/chat","versions":["1.2.7"],"evidenceCount":2},{"id":"opencode:4609","slug":"opencode-4609","name":"LLM_Workshop","pathWithNamespace":"bbsr_ida_public/llm_workshop","versions":["0.3.21"],"evidenceCount":1},{"id":"opencode:8742","slug":"opencode-8742","name":"ai-websearch-benchmark","pathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","versions":["1.0.6"],"evidenceCount":1},{"id":"opencode:4166","slug":"opencode-4166","name":"ai-legal-graph","pathWithNamespace":"iorb/ai-legal-graph","versions":["0.1.1"],"evidenceCount":1},{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["1.2.5"],"evidenceCount":1},{"id":"opencode:12239","slug":"opencode-12239","name":"LLM Service","pathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","versions":["1.2.9"],"evidenceCount":1}],"versions":[{"version":"0.1.1","repositoryCount":1,"occurrenceCount":1,"ageDays":781,"advisoryIds":["GHSA-g48c-2wqr-h844","GHSA-w39p-vh2g-g8g5"],"metadata":{"state":"resolved","checkedAt":"2026-08-12T03:23:44.487Z","publishedAt":"2024-06-22T00:51:10Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-g48c-2wqr-h844","PYSEC-2026-2194","PYSEC-2026-83"],"links":[{"label":"SOURCE_REPO","url":"https://www.github.com/langchain-ai/langgraph"}],"relatedProjects":[{"id":"github.com/langchain-ai/langgraph","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"0.3.21","repositoryCount":1,"occurrenceCount":1,"ageDays":502,"advisoryIds":["GHSA-g48c-2wqr-h844"],"metadata":{"state":"resolved","checkedAt":"2026-08-12T03:23:44.487Z","publishedAt":"2025-03-27T15:49:43Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-g48c-2wqr-h844","PYSEC-2026-83"],"links":[{"label":"SOURCE_REPO","url":"https://www.github.com/langchain-ai/langgraph"}],"relatedProjects":[{"id":"github.com/langchain-ai/langgraph","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.0.6","repositoryCount":1,"occurrenceCount":1,"ageDays":211,"advisoryIds":["GHSA-g48c-2wqr-h844"],"metadata":{"state":"resolved","checkedAt":"2026-08-12T03:23:44.487Z","publishedAt":"2026-01-12T20:33:29Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-g48c-2wqr-h844","PYSEC-2026-83"],"links":[{"label":"HOMEPAGE","url":"https://docs.langchain.com/oss/python/langgraph/overview"},{"label":"DOCUMENTATION","url":"https://reference.langchain.com/python/langgraph/"},{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langgraph"}],"relatedProjects":[{"id":"github.com/langchain-ai/langgraph","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.2.5","repositoryCount":1,"occurrenceCount":1,"ageDays":60,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-08-12T03:23:44.487Z","publishedAt":"2026-06-12T20:30:57Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://docs.langchain.com/oss/python/langgraph/overview"},{"label":"DOCUMENTATION","url":"https://reference.langchain.com/python/langgraph/"},{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langgraph"}],"relatedProjects":[{"id":"github.com/langchain-ai/langgraph","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.2.7","repositoryCount":1,"occurrenceCount":2,"ageDays":43,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-08-12T03:23:44.487Z","publishedAt":"2026-06-30T01:24:11Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langgraph"},{"label":"HOMEPAGE","url":"https://docs.langchain.com/oss/python/langgraph/overview"},{"label":"DOCUMENTATION","url":"https://reference.langchain.com/python/langgraph/"}],"relatedProjects":[{"id":"github.com/langchain-ai/langgraph","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.2.9","repositoryCount":1,"occurrenceCount":1,"ageDays":33,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-08-12T03:23:44.487Z","publishedAt":"2026-07-10T01:30:13Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://docs.langchain.com/oss/python/langgraph/overview"},{"label":"DOCUMENTATION","url":"https://reference.langchain.com/python/langgraph/"},{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langgraph"}],"relatedProjects":[{"id":"github.com/langchain-ai/langgraph","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"1.2.10","repositoryCount":1,"occurrenceCount":2,"ageDays":14,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-08-12T03:23:44.487Z","publishedAt":"2026-07-28T18:33:50Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://docs.langchain.com/oss/python/langgraph/overview"},{"label":"DOCUMENTATION","url":"https://reference.langchain.com/python/langgraph/"},{"label":"SOURCE_REPO","url":"https://github.com/langchain-ai/langgraph"}],"relatedProjects":[{"id":"github.com/langchain-ai/langgraph","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:8d17b4d6f59bdf33d974566d","repositoryId":"opencode:4166","repositorySlug":"opencode-4166","repositoryName":"ai-legal-graph","repositoryPathWithNamespace":"iorb/ai-legal-graph","ecosystem":"pypi","name":"langgraph","identity":"pypi:langgraph","version":"0.1.1","versionKey":"pypi:langgraph@0.1.1","direct":true,"development":false,"sourceKind":"exact-manifest-pin","filePath":"requirements.txt","blobSha":"eb8e9a474c655bc81e1a5841cf757dec75775529","sourceUrl":"https://gitlab.opencode.de/iorb/ai-legal-graph/-/blob/8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be/requirements.txt","commitSha":"8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be"},{"id":"component:d7ed0b97b0e6b5d9e993a8c1","repositoryId":"opencode:8742","repositorySlug":"opencode-8742","repositoryName":"ai-websearch-benchmark","repositoryPathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","ecosystem":"pypi","name":"langgraph","identity":"pypi:langgraph","version":"1.0.6","versionKey":"pypi:langgraph@1.0.6","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"4f7b4e2e096e186e4408b529568676aa8c71ba55","sourceUrl":"https://gitlab.opencode.de/datenlabor-bmz/ai-websearch-benchmark/-/blob/cd6b854b1b400d7e45796aaa22bded8183642916/uv.lock","commitSha":"cd6b854b1b400d7e45796aaa22bded8183642916"},{"id":"component:7c548e4afec8a9e72d3ba57c","repositoryId":"opencode:5711","repositorySlug":"opencode-5711","repositoryName":"Chat","repositoryPathWithNamespace":"f13/microservices/chat","ecosystem":"pypi","name":"langgraph","identity":"pypi:langgraph","version":"1.2.10","versionKey":"pypi:langgraph@1.2.10","direct":false,"development":false,"sourceKind":"exact-manifest-pin","filePath":"requirements-dev.txt","blobSha":"55d24b0ef7928f118b1abca940e9921a2650f62b","sourceUrl":"https://gitlab.opencode.de/f13/microservices/chat/-/blob/80a91b641aa350678c5e35c31e90ffbb9e696d3c/requirements-dev.txt","commitSha":"80a91b641aa350678c5e35c31e90ffbb9e696d3c"},{"id":"component:7012d5d7d71deb2d684977ed","repositoryId":"opencode:5711","repositorySlug":"opencode-5711","repositoryName":"Chat","repositoryPathWithNamespace":"f13/microservices/chat","ecosystem":"pypi","name":"langgraph","identity":"pypi:langgraph","version":"1.2.10","versionKey":"pypi:langgraph@1.2.10","direct":false,"development":false,"sourceKind":"exact-manifest-pin","filePath":"requirements.txt","blobSha":"2dfd8d16ab95eb8d2065f80c3730c69a9dca6637","sourceUrl":"https://gitlab.opencode.de/f13/microservices/chat/-/blob/80a91b641aa350678c5e35c31e90ffbb9e696d3c/requirements.txt","commitSha":"80a91b641aa350678c5e35c31e90ffbb9e696d3c"},{"id":"component:6e340bf47e575eee1f4c117d","repositoryId":"opencode:11665","repositorySlug":"opencode-11665","repositoryName":"Chat","repositoryPathWithNamespace":"oc000155135727/chat","ecosystem":"pypi","name":"langgraph","identity":"pypi:langgraph","version":"1.2.7","versionKey":"pypi:langgraph@1.2.7","direct":false,"development":false,"sourceKind":"exact-manifest-pin","filePath":"requirements-dev.txt","blobSha":"fd14e62cdbbceb707e82de32261f078ce7e761e6","sourceUrl":"https://gitlab.opencode.de/oc000155135727/chat/-/blob/5a50523649346b69cc333b11dd289783f02c7a44/requirements-dev.txt","commitSha":"5a50523649346b69cc333b11dd289783f02c7a44"},{"id":"component:eb66787e0c373ade56d6d75e","repositoryId":"opencode:11665","repositorySlug":"opencode-11665","repositoryName":"Chat","repositoryPathWithNamespace":"oc000155135727/chat","ecosystem":"pypi","name":"langgraph","identity":"pypi:langgraph","version":"1.2.7","versionKey":"pypi:langgraph@1.2.7","direct":false,"development":false,"sourceKind":"exact-manifest-pin","filePath":"requirements.txt","blobSha":"609077cf5528aa4d11e7334fbb27ee972681b7b2","sourceUrl":"https://gitlab.opencode.de/oc000155135727/chat/-/blob/5a50523649346b69cc333b11dd289783f02c7a44/requirements.txt","commitSha":"5a50523649346b69cc333b11dd289783f02c7a44"},{"id":"component:09e89150f5ec343d00884b92","repositoryId":"opencode:12239","repositorySlug":"opencode-12239","repositoryName":"LLM Service","repositoryPathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","ecosystem":"pypi","name":"langgraph","identity":"pypi:langgraph","version":"1.2.9","versionKey":"pypi:langgraph@1.2.9","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"5c34ec93b8f084fb238b9dfb84642a3091538e9d","sourceUrl":"https://gitlab.opencode.de/sh/diwish/splitbot/kosmo/llm-service/-/blob/318cda8c49da743f2c4a18a4f4d5c36fc22102fc/uv.lock","commitSha":"318cda8c49da743f2c4a18a4f4d5c36fc22102fc"},{"id":"component:69d4c9f26a160b47e1488068","repositoryId":"opencode:4609","repositorySlug":"opencode-4609","repositoryName":"LLM_Workshop","repositoryPathWithNamespace":"bbsr_ida_public/llm_workshop","ecosystem":"pypi","name":"langgraph","identity":"pypi:langgraph","version":"0.3.21","versionKey":"pypi:langgraph@0.3.21","direct":true,"development":false,"sourceKind":"exact-manifest-pin","filePath":"docker/requirements.txt","blobSha":"0d707ff70a4c5b3584990d5380c8bf62c64284b5","sourceUrl":"https://gitlab.opencode.de/bbsr_ida_public/llm_workshop/-/blob/fddd886ab2fd3824e269d40cefde90cbed709201/docker/requirements.txt","commitSha":"fddd886ab2fd3824e269d40cefde90cbed709201"},{"id":"component:3656fe8f5facf8af5d86eca8","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"langgraph","identity":"pypi:langgraph","version":"1.2.5","versionKey":"pypi:langgraph@1.2.5","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-core-service/uv.lock","blobSha":"8bf6980137a09f5692c9e62798298a2cd9122a99","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/4d053562adec8962a8e523b7ed27b48a9f882d60/mucgpt-core-service/uv.lock","commitSha":"4d053562adec8962a8e523b7ed27b48a9f882d60"}],"occurrenceCount":9},"related":{"repositories":[{"id":"opencode:5711","slug":"opencode-5711","name":"Chat","pathWithNamespace":"f13/microservices/chat","versions":["1.2.10"],"evidenceCount":2},{"id":"opencode:11665","slug":"opencode-11665","name":"Chat","pathWithNamespace":"oc000155135727/chat","versions":["1.2.7"],"evidenceCount":2},{"id":"opencode:4609","slug":"opencode-4609","name":"LLM_Workshop","pathWithNamespace":"bbsr_ida_public/llm_workshop","versions":["0.3.21"],"evidenceCount":1},{"id":"opencode:8742","slug":"opencode-8742","name":"ai-websearch-benchmark","pathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","versions":["1.0.6"],"evidenceCount":1},{"id":"opencode:4166","slug":"opencode-4166","name":"ai-legal-graph","pathWithNamespace":"iorb/ai-legal-graph","versions":["0.1.1"],"evidenceCount":1},{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["1.2.5"],"evidenceCount":1},{"id":"opencode:12239","slug":"opencode-12239","name":"LLM Service","pathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","versions":["1.2.9"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-g48c-2wqr-h844","slug":"ghsa-g48c-2wqr-h844-48f35247","dossier":false,"summary":"LangGraph checkpoint loading has unsafe msgpack deserialization","aliases":["CVE-2026-28277","PYSEC-2026-83"],"sourceIds":["GHSA-g48c-2wqr-h844","PYSEC-2026-83"],"published":"2026-03-05T20:16:15.677Z","modified":"2026-06-06T01:00:08.116125988Z","checkedAt":"2026-08-12T14:25:03.090Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/langchain-ai/langgraph/security/advisories/GHSA-g48c-2wqr-h844"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28277"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langgraph"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/langgraph/PYSEC-2026-83.yaml"}],"versionKeys":["pypi:langgraph@0.1.1","pypi:langgraph@0.3.21","pypi:langgraph@1.0.6"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-w39p-vh2g-g8g5","slug":"ghsa-w39p-vh2g-g8g5-47880dfe","dossier":false,"summary":"LangGraph SDK has unsafe URL path construction","aliases":["CVE-2026-48776","PYSEC-2026-2194","PYSEC-2026-2575"],"sourceIds":["GHSA-w39p-vh2g-g8g5","PYSEC-2026-2194","PYSEC-2026-2575"],"published":"2026-06-17T10:55:15.113Z","modified":"2026-07-21T15:15:50.659527533Z","checkedAt":"2026-08-12T14:25:03.090Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/langchain-ai/langgraph/security/advisories/GHSA-w39p-vh2g-g8g5"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48776"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-w39p-vh2g-g8g5"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langgraph"},{"type":"WEB","url":"https://github.com/langchain-ai/langgraph/releases/tag/sdk%3D%3D0.3.15"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/langgraph-sdk/PYSEC-2026-2575.yaml"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/langgraph/PYSEC-2026-2194.yaml"},{"type":"PACKAGE","url":"https://pypi.org/project/langgraph-sdk"}],"versionKeys":["pypi:langgraph-sdk@0.3.3","pypi:langgraph@0.1.1"],"packageCount":2,"repositoryCount":2}]}}