[{"data":1,"prerenderedAt":219},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-dspy-70e56922":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":163,"related":184},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:52:27.520Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:50:55.687Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"paket",{"id":77,"slug":78,"identity":79,"ecosystem":80,"name":81,"label":82,"category":83,"aiRelevant":84,"provider":85,"repositoryCount":86,"occurrenceCount":86,"directRepositoryCount":37,"versionCount":86,"licenseExpressions":87,"advisoryIds":89,"advisoryCount":32,"verifiedAttestation":45,"repositories":91,"versions":113},"package:pypi:dspy","dspy-70e56922","pypi:dspy","pypi","dspy","DSPy","orchestration",true,null,3,[88],"MIT",[90],"GHSA-vvw2-h478-xwr3",[92,99,106],{"id":93,"slug":94,"name":95,"pathWithNamespace":96,"versions":97,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[98],"2.6.27",{"id":100,"slug":101,"name":102,"pathWithNamespace":103,"versions":104,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[105],"2.6.23",{"id":107,"slug":108,"name":109,"pathWithNamespace":110,"versions":111,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[112],"2.5.43",[114,134,150],{"version":112,"repositoryCount":32,"occurrenceCount":32,"ageDays":115,"advisoryIds":116,"metadata":117},607,[90],{"state":118,"checkedAt":119,"publishedAt":120,"deprecated":45,"deprecatedReason":85,"licenses":121,"advisoryIds":122,"links":124,"relatedProjects":128,"attestations":132,"verifiedAttestation":45,"projectStatus":133},"resolved","2026-08-13T02:29:21.454Z","2024-12-13T15:02:33Z",[88],[90,123],"PYSEC-2026-1318",[125],{"label":126,"url":127},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Fstanfordnlp\u002Fdsp",[129],{"id":130,"relationType":126,"relationProvenance":131},"github.com\u002Fstanfordnlp\u002Fdsp","UNVERIFIED_METADATA",[],"active",{"version":105,"repositoryCount":32,"occurrenceCount":32,"ageDays":135,"advisoryIds":136,"metadata":137},464,[90],{"state":118,"checkedAt":119,"publishedAt":138,"deprecated":45,"deprecatedReason":85,"licenses":139,"advisoryIds":140,"links":141,"relatedProjects":146,"attestations":149,"verifiedAttestation":45,"projectStatus":133},"2025-05-05T15:20:19Z",[88],[90,123],[142,145],{"label":143,"url":144},"HOMEPAGE","https:\u002F\u002Fgithub.com\u002Fstanfordnlp\u002Fdspy",{"label":126,"url":144},[147],{"id":148,"relationType":126,"relationProvenance":131},"github.com\u002Fstanfordnlp\u002Fdspy",[],{"version":98,"repositoryCount":32,"occurrenceCount":32,"ageDays":151,"advisoryIds":152,"metadata":153},435,[90],{"state":118,"checkedAt":119,"publishedAt":154,"deprecated":45,"deprecatedReason":85,"licenses":155,"advisoryIds":156,"links":157,"relatedProjects":160,"attestations":162,"verifiedAttestation":45,"projectStatus":133},"2025-06-03T17:47:11Z",[88],[90,123],[158,159],{"label":143,"url":144},{"label":126,"url":144},[161],{"id":148,"relationType":126,"relationProvenance":131},[],{"occurrences":164,"occurrenceCount":86},[165,172,178],{"id":166,"repositoryId":93,"repositorySlug":94,"repositoryName":95,"repositoryPathWithNamespace":96,"ecosystem":80,"name":81,"identity":79,"version":98,"versionKey":167,"direct":85,"development":85,"sourceKind":168,"filePath":54,"blobSha":169,"sourceUrl":170,"commitSha":171},"component:df6c47c7538956a2d075079a","pypi:dspy@2.6.27","uv-lock","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":173,"repositoryId":100,"repositorySlug":101,"repositoryName":102,"repositoryPathWithNamespace":103,"ecosystem":80,"name":81,"identity":79,"version":105,"versionKey":174,"direct":85,"development":85,"sourceKind":168,"filePath":54,"blobSha":175,"sourceUrl":176,"commitSha":177},"component:75a50b1bed116b35307c93c6","pypi:dspy@2.6.23","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"id":179,"repositoryId":107,"repositorySlug":108,"repositoryName":109,"repositoryPathWithNamespace":110,"ecosystem":80,"name":81,"identity":79,"version":112,"versionKey":180,"direct":85,"development":85,"sourceKind":168,"filePath":54,"blobSha":181,"sourceUrl":182,"commitSha":183},"component:55714d284dc273d83d161bfe","pypi:dspy@2.5.43","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"repositories":185,"vulnerabilities":192},[186,188,190],{"id":93,"slug":94,"name":95,"pathWithNamespace":96,"versions":187,"evidenceCount":32},[98],{"id":100,"slug":101,"name":102,"pathWithNamespace":103,"versions":189,"evidenceCount":32},[105],{"id":107,"slug":108,"name":109,"pathWithNamespace":110,"versions":191,"evidenceCount":32},[112],[193],{"id":90,"slug":194,"dossier":45,"summary":195,"aliases":196,"sourceIds":198,"published":199,"modified":200,"checkedAt":7,"severity":201,"references":205,"versionKeys":218,"packageCount":32,"repositoryCount":86},"ghsa-vvw2-h478-xwr3-e8568ce6","DSPy does not properly restrict file reads",[197,123],"CVE-2025-12695",[90,123],"2025-11-04T15:31:35Z","2026-07-07T17:57:24.503135806Z",[202],{"type":203,"score":204},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[206,209,211,214,216],{"type":207,"url":208},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12695",{"type":210,"url":144},"PACKAGE",{"type":212,"url":213},"WEB","https:\u002F\u002Fresearch.jfrog.com\u002Fvulnerabilities\u002Fdspy-sandbox-escape-arbitrary-file-read-jfsa-2025-001495652",{"type":210,"url":215},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdspy",{"type":207,"url":217},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vvw2-h478-xwr3",[180,174,167],1786593603167]