i6eal.de
DEEN
Start a project
← Back to the AI Dependency AtlasExact package identity dossier

filelock

pypi:filelock
pypi

This dossier links the stable identity pypi:filelock to 13 exact observed versions across 24 public repositories.

pypipypi:filelockecosystem:name + exact version + evidence path

A package identity or provider interface in published code does not prove configuration, an account, procurement, data transfer or an API call.

ecosystem:name + exact version + evidence path
24repositories
28exact evidence rows
13exact versions
2reported license expressions
11OSV records returned
Exact published evidence

Observed exact versions and registry metadata

Publication age and licenses come from deps.dev metadata. They are context—not a maintenance, legal or portability verdict.

Exact version3.16.117 Sept 2024
Repositories
2
Occurrences
2
Reported licenses
Unlicense
no verified publish attestation reported4 OSV records
Open exact source ↗
Exact version3.18.014 Mar 2025
Repositories
6
Occurrences
7
Reported licenses
Unlicense
verified publish attestation4 OSV records
Open exact source ↗
Exact version3.19.114 Aug 2025
Repositories
2
Occurrences
2
Reported licenses
Unlicense
verified publish attestation4 OSV records
Open exact source ↗
Exact version3.20.008 Oct 2025
Repositories
4
Occurrences
4
Reported licenses
Unlicense
verified publish attestation4 OSV records
Open exact source ↗
Exact version3.20.309 Jan 2026
Repositories
1
Occurrences
1
Reported licenses
Unlicense
verified publish attestation2 OSV records
Open exact source ↗
Exact version3.25.211 Mar 2026
Repositories
2
Occurrences
2
Reported licenses
MIT
verified publish attestation9 OSV records
Open exact source ↗
Exact version3.29.019 Apr 2026
Repositories
1
Occurrences
1
Reported licenses
MIT
verified publish attestation9 OSV records
Open exact source ↗
Exact version3.29.413 Jun 2026
Repositories
1
Occurrences
1
Reported licenses
MIT
verified publish attestation9 OSV records
Open exact source ↗
Exact version3.29.708 Jul 2026
Repositories
1
Occurrences
1
Reported licenses
MIT
verified publish attestation9 OSV records
Open exact source ↗
Exact version4.2.117 Oct 2026
Repositories
1
Occurrences
1
Reported licenses
MIT
verified publish attestationNo OSV record returned for this exact version
Open exact source ↗
Exact version4.2.419 Oct 2026
Repositories
3
Occurrences
4
Reported licenses
MIT
verified publish attestationNo OSV record returned for this exact version
Open exact source ↗
Exact version4.2.702 Nov 2026
Repositories
1
Occurrences
1
Reported licenses
MIT
verified publish attestationNo OSV record returned for this exact version
Open exact source ↗
Exact version4.2.904 Nov 2026
Repositories
1
Occurrences
1
Reported licenses
MIT
verified publish attestationNo OSV record returned for this exact version
Open exact source ↗
Observed relations

Repositories carrying this identity

MUCGPTlandeshauptstadt-muenchen/mucgpt
4.2.1 · 4.2.43 Occurrences
→
SmartPlanAI Anwendungsh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung
3.19.1 · 3.25.22 Occurrences
→
strahlenexpositionuba-ki-lab/strahlenexposition
3.18.02 Occurrences
→
kiva-llm-gatewaybaden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway
3.16.11 Occurrence
→
sprachbuchung-erzmobilerzmobil/ai-voicebot/sprachbuchung-erzmobil
4.2.41 Occurrence
→
Agentf13/microservices/agentic-orchestrator
4.2.91 Occurrence
→
Datastoref13/microservices/datastore
4.2.71 Occurrence
→
RAGf13/microservices/rag
4.2.41 Occurrence
→
sprache2text+meer - Transkription für Jugendamt Verwaltungsh/digitalhub-sh/landesprogramm-offene-innovationen/aTrain
3.29.41 Occurrence
→
LLM Servicesh/diwish/splitbot/kosmo/llm-service
3.29.71 Occurrence
→
Coding Agent Usage Simulationuba-ki-lab/coding-agent-usage-simulation
3.20.01 Occurrence
→
data_quality_in_wastewater_surveillanceuba-ki-lab/data_quality_in_wastewater_surveillance
3.18.01 Occurrence
→
density-mapsuba-ki-lab/density-maps
3.25.21 Occurrence
→
GSA Extractionuba-ki-lab/gsa-extraction
3.18.01 Occurrence
→
LLM Questionnaire Benchmarking Frameworkuba-ki-lab/llm-questionnaire-benchmarking-framework
3.19.11 Occurrence
→
LLM Testframeworkuba-ki-lab/llm-testframework
3.18.01 Occurrence
→
Objection managementuba-ki-lab/objection-management
3.16.11 Occurrence
→
photovoltaic_systemsuba-ki-lab/photovoltaic_systems
3.18.01 Occurrence
→
Ressource Efficient Computer Visionuba-ki-lab/ressource-efficient-computer-vision
3.20.31 Occurrence
→
Retrieval Evaluationuba-ki-lab/retrieval-evaluation
3.20.01 Occurrence
→
URBAN.KI AirGuardAIvernetzte-stadt-gelsenkirchen/urban.ki/urban.ki-airguardai
3.29.01 Occurrence
→
URBAN.KI SmartEnergievernetzte-stadt-gelsenkirchen/urban.ki/urban.ki-smartenergie
3.20.01 Occurrence
→
URBAN.KI Soviavernetzte-stadt-gelsenkirchen/urban.ki/urban.ki-sovia
3.18.01 Occurrence
→
URBAN.KI Sovia-appvernetzte-stadt-gelsenkirchen/urban.ki/urban.ki-sovia-app
3.20.01 Occurrence
→
Exact published evidence

exact evidence rows

Agentf13/microservices/agentic-orchestrator
pypi:filelock@4.2.9uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
Coding Agent Usage Simulationuba-ki-lab/coding-agent-usage-simulation
pypi:filelock@3.20.0uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
data_quality_in_wastewater_surveillanceuba-ki-lab/data_quality_in_wastewater_surveillance
pypi:filelock@3.18.0sbom.json
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
Datastoref13/microservices/datastore
pypi:filelock@4.2.7uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
density-mapsuba-ki-lab/density-maps
pypi:filelock@3.25.2uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
GSA Extractionuba-ki-lab/gsa-extraction
pypi:filelock@3.18.0uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
kiva-llm-gatewaybaden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway
pypi:filelock@3.16.1poetry.lock
declaration relationship not reportednot marked as development-only
Open exact source ↗
LLM Questionnaire Benchmarking Frameworkuba-ki-lab/llm-questionnaire-benchmarking-framework
pypi:filelock@3.19.1uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
LLM Servicesh/diwish/splitbot/kosmo/llm-service
pypi:filelock@3.29.7uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
LLM Testframeworkuba-ki-lab/llm-testframework
pypi:filelock@3.18.0uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
MUCGPTlandeshauptstadt-muenchen/mucgpt
pypi:filelock@4.2.1mucgpt-core-service/uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
MUCGPTlandeshauptstadt-muenchen/mucgpt
pypi:filelock@4.2.4mucgpt-assistant-service/uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
MUCGPTlandeshauptstadt-muenchen/mucgpt
pypi:filelock@4.2.4uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
Objection managementuba-ki-lab/objection-management
pypi:filelock@3.16.1uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
photovoltaic_systemsuba-ki-lab/photovoltaic_systems
pypi:filelock@3.18.0sbom.json
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
RAGf13/microservices/rag
pypi:filelock@4.2.4uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
Ressource Efficient Computer Visionuba-ki-lab/ressource-efficient-computer-vision
pypi:filelock@3.20.3uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
Retrieval Evaluationuba-ki-lab/retrieval-evaluation
pypi:filelock@3.20.0uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
SmartPlanAI Anwendungsh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung
pypi:filelock@3.19.1blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock
declaration relationship not reporteddevelopment dependency
Open exact source ↗
SmartPlanAI Anwendungsh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung
pypi:filelock@3.25.2poetry.lock
declaration relationship not reportednot marked as development-only
Open exact source ↗
sprachbuchung-erzmobilerzmobil/ai-voicebot/sprachbuchung-erzmobil
pypi:filelock@4.2.4uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
sprache2text+meer - Transkription für Jugendamt Verwaltungsh/digitalhub-sh/landesprogramm-offene-innovationen/aTrain
pypi:filelock@3.29.4uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
strahlenexpositionuba-ki-lab/strahlenexposition
pypi:filelock@3.18.0poetry.lock
declaration relationship not reporteddevelopment dependency
Open exact source ↗
strahlenexpositionuba-ki-lab/strahlenexposition
pypi:filelock@3.18.0sbom.json
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
URBAN.KI AirGuardAIvernetzte-stadt-gelsenkirchen/urban.ki/urban.ki-airguardai
pypi:filelock@3.29.0uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
URBAN.KI SmartEnergievernetzte-stadt-gelsenkirchen/urban.ki/urban.ki-smartenergie
pypi:filelock@3.20.0uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
URBAN.KI Soviavernetzte-stadt-gelsenkirchen/urban.ki/urban.ki-sovia
pypi:filelock@3.18.0uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
URBAN.KI Sovia-appvernetzte-stadt-gelsenkirchen/urban.ki/urban.ki-sovia-app
pypi:filelock@3.20.0uv.lock
declaration relationship not reporteddevelopment scope not reported
Open exact source ↗
OSV

Related OSV records

GHSA-567q-5qvw-pf92

filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

5 repositories24 Oct 2026
GHSA-69hj-f68j-2879

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path

19 repositories28 Oct 2026
→
GHSA-8mx5-7m5m-r77g

filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL

19 repositories28 Oct 2026
GHSA-9vhv-jxww-xfm5

filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database

5 repositories24 Oct 2026
GHSA-cwqr-hh33-gh44

filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout

5 repositories28 Oct 2026
GHSA-fq56-3cx3-fjxp

filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders

5 repositories28 Oct 2026
GHSA-j8f7-rjxc-mr56

filelock: ReadWriteLock follows a symlink at the lock path into SQLite

5 repositories28 Oct 2026
GHSA-qmgc-5h2g-mvrw

filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock

14 repositories10 Sept 2026
GHSA-rfpc-qcw5-3pc4

filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker

5 repositories28 Oct 2026
GHSA-v4x8-3wr5-3wq8

filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files

5 repositories24 Oct 2026
GHSA-w853-jp5j-5j7f

filelock has a TOCTOU race condition which allows symlink attacks during lock file creation

14 repositories10 Sept 2026
Interpretation boundary

Exact identities in, explicit limits out

Only exact npm and PyPI tuples are enriched. Reported SPDX expressions are metadata; no compatibility, obligation or legal conclusion is inferred.

Retrieval, parsing, matching and publishing use no generative AI model.

i6eal (2026): filelock — exact AI dependency evidence dossier, data state 15 Nov 2026. https://i6eal.de/en/tools/ki-abhaengigkeitsatlas/paket/filelock-b1c63968/

Reading this dossier

Does package presence prove that a provider is used?
No. Even a direct interface declaration does not establish configuration, credentials, procurement, data transfer or an API call.
Why are exact versions required?
OSV and registry metadata can be linked reproducibly only to an observed package@version tuple. The collector never substitutes a newest release for a range.
Does a missing row mean the dependency is absent?
No. It means not observed within the bounded files and repository checkpoint. Incomplete trees and parser failures remain explicit.

Need a permanent dependency evidence trail for another public code cohort?

We build source-backed data products with stable identities, reproducible joins and boundaries that remain visible.

Discuss a data projectExplore all tools
Related tools

Useful next steps

These tools cover related ground.

View all tools
MonitorGerman public-sector AI Code RadarWhich AI building blocks does German public administration publish as open code? Exact packages, containers, commit SHAs and file paths from openCode, with permanent dossiers and no deployment claim.MonitorGerman public-sector AI registerWhere does German public administration already use AI? Search published system profiles from federal, state and municipal bodies, with lifecycle, governance fields, stable identifiers and original evidence.Provenance checkPublic-sector AI system passportSee which public records can be linked to each published government AI system through stable identifiers or exact source-declared repository URLs—with a source for every edge and visible evidence boundaries.