[{"data":1,"prerenderedAt":351},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-fonttools-d2488ea8":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":247,"related":304},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:52:27.520Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:50:55.687Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"paket",{"id":77,"slug":78,"identity":79,"ecosystem":80,"name":81,"label":81,"category":82,"aiRelevant":45,"provider":82,"repositoryCount":83,"occurrenceCount":84,"directRepositoryCount":37,"versionCount":85,"licenseExpressions":86,"advisoryIds":88,"advisoryCount":32,"verifiedAttestation":90,"repositories":91,"versions":148},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","pypi","fonttools",null,8,9,7,[87],"MIT",[89],"GHSA-768j-98cg-p3fv",true,[92,100,107,114,121,128,135,141],{"id":93,"slug":94,"name":95,"pathWithNamespace":96,"versions":97,"evidenceCount":99},"opencode:5142","opencode-5142","strahlenexposition","uba-ki-lab\u002Fstrahlenexposition",[98],"4.57.0",2,{"id":101,"slug":102,"name":103,"pathWithNamespace":104,"versions":105,"evidenceCount":32},"opencode:6174","opencode-6174","Energieautarkes Wohnquartier - Backend","energieautarkes-wohnquartier\u002Fbackend",[106],"4.58.0",{"id":108,"slug":109,"name":110,"pathWithNamespace":111,"versions":112,"evidenceCount":32},"opencode:10162","opencode-10162","SmartPlanAI Anwendung","sh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung",[113],"4.62.1",{"id":115,"slug":116,"name":117,"pathWithNamespace":118,"versions":119,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[120],"4.58.5",{"id":122,"slug":123,"name":124,"pathWithNamespace":125,"versions":126,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[127],"4.59.2",{"id":129,"slug":130,"name":131,"pathWithNamespace":132,"versions":133,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[134],"4.55.3",{"id":136,"slug":137,"name":138,"pathWithNamespace":139,"versions":140,"evidenceCount":32},"opencode:5201","opencode-5201","photovoltaic_systems","uba-ki-lab\u002Fphotovoltaic_systems",[106],{"id":142,"slug":143,"name":144,"pathWithNamespace":145,"versions":146,"evidenceCount":32},"opencode:10775","opencode-10775","Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision",[147],"4.61.1",[149,167,178,189,200,211,231],{"version":134,"repositoryCount":32,"occurrenceCount":32,"ageDays":150,"advisoryIds":151,"metadata":152},610,[89],{"state":153,"checkedAt":154,"publishedAt":155,"deprecated":45,"deprecatedReason":82,"licenses":156,"advisoryIds":157,"links":159,"relatedProjects":160,"attestations":165,"verifiedAttestation":45,"projectStatus":166},"resolved","2026-08-13T02:29:21.454Z","2024-12-10T21:39:22Z",[87],[89,158],"PYSEC-2026-1389",[],[161],{"id":162,"relationType":163,"relationProvenance":164},"github.com\u002Ffonttools\u002Ffonttools","SOURCE_REPO","UNVERIFIED_METADATA",[],"active",{"version":98,"repositoryCount":32,"occurrenceCount":99,"ageDays":168,"advisoryIds":169,"metadata":170},496,[89],{"state":153,"checkedAt":154,"publishedAt":171,"deprecated":45,"deprecatedReason":82,"licenses":172,"advisoryIds":173,"links":174,"relatedProjects":175,"attestations":177,"verifiedAttestation":45,"projectStatus":166},"2025-04-03T11:07:11Z",[87],[89,158],[],[176],{"id":162,"relationType":163,"relationProvenance":164},[],{"version":106,"repositoryCount":99,"occurrenceCount":99,"ageDays":179,"advisoryIds":180,"metadata":181},459,[89],{"state":153,"checkedAt":154,"publishedAt":182,"deprecated":45,"deprecatedReason":82,"licenses":183,"advisoryIds":184,"links":185,"relatedProjects":186,"attestations":188,"verifiedAttestation":45,"projectStatus":166},"2025-05-10T17:36:33Z",[87],[89,158],[],[187],{"id":162,"relationType":163,"relationProvenance":164},[],{"version":120,"repositoryCount":32,"occurrenceCount":32,"ageDays":190,"advisoryIds":191,"metadata":192},405,[89],{"state":153,"checkedAt":154,"publishedAt":193,"deprecated":45,"deprecatedReason":82,"licenses":194,"advisoryIds":195,"links":196,"relatedProjects":197,"attestations":199,"verifiedAttestation":45,"projectStatus":166},"2025-07-03T14:04:45Z",[87],[89,158],[],[198],{"id":162,"relationType":163,"relationProvenance":164},[],{"version":127,"repositoryCount":32,"occurrenceCount":32,"ageDays":201,"advisoryIds":202,"metadata":203},350,[89],{"state":153,"checkedAt":154,"publishedAt":204,"deprecated":45,"deprecatedReason":82,"licenses":205,"advisoryIds":206,"links":207,"relatedProjects":208,"attestations":210,"verifiedAttestation":45,"projectStatus":166},"2025-08-27T16:39:42Z",[87],[89,158],[],[209],{"id":162,"relationType":163,"relationProvenance":164},[],{"version":147,"repositoryCount":32,"occurrenceCount":32,"ageDays":212,"advisoryIds":213,"metadata":214},243,[],{"state":153,"checkedAt":154,"publishedAt":215,"deprecated":45,"deprecatedReason":82,"licenses":216,"advisoryIds":217,"links":218,"relatedProjects":222,"attestations":226,"verifiedAttestation":90,"projectStatus":166},"2025-12-12T17:30:47Z",[87],[],[219],{"label":220,"url":221},"ATTESTATION","https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ffonttools\u002F4.61.1\u002Ffonttools-4.61.1-cp314-cp314-manylinux1_x86_64.manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_5_x86_64.whl\u002Fprovenance",[223,224],{"id":162,"relationType":163,"relationProvenance":164},{"id":162,"relationType":163,"relationProvenance":225},"PYPI_PUBLISH_ATTESTATION",[227],{"type":228,"url":221,"verified":90,"sourceRepository":229,"commit":230},"https:\u002F\u002Fdocs.pypi.org\u002Fattestations\u002Fpublish\u002Fv1","https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools","0a6517921cb779fef919a5e2cbc1a01e77375ced",{"version":113,"repositoryCount":32,"occurrenceCount":32,"ageDays":232,"advisoryIds":233,"metadata":234},152,[],{"state":153,"checkedAt":154,"publishedAt":235,"deprecated":45,"deprecatedReason":82,"licenses":236,"advisoryIds":237,"links":238,"relatedProjects":241,"attestations":244,"verifiedAttestation":90,"projectStatus":166},"2026-03-13T13:53:45Z",[87],[],[239],{"label":220,"url":240},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ffonttools\u002F4.62.1\u002Ffonttools-4.62.1-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl\u002Fprovenance",[242,243],{"id":162,"relationType":163,"relationProvenance":164},{"id":162,"relationType":163,"relationProvenance":225},[245],{"type":228,"url":240,"verified":90,"sourceRepository":229,"commit":246},"da54a2924009c9a6497dad23f4a6be4a96a8b0e7",{"occurrences":248,"occurrenceCount":84},[249,256,263,269,275,282,288,294,300],{"id":250,"repositoryId":101,"repositorySlug":102,"repositoryName":103,"repositoryPathWithNamespace":104,"ecosystem":80,"name":81,"identity":79,"version":106,"versionKey":251,"direct":82,"development":45,"sourceKind":252,"filePath":55,"blobSha":253,"sourceUrl":254,"commitSha":255},"component:9d0ed4590d410bd37aeab076","pypi:fonttools@4.58.0","poetry-lock","dc5008ef9fba69d70ea9e7b3fea21265fa5ef93d","https:\u002F\u002Fgitlab.opencode.de\u002Fenergieautarkes-wohnquartier\u002Fbackend\u002F-\u002Fblob\u002Ffc7e24cd546449ac9fdee4ad78aab861e0c89666\u002Fpoetry.lock","fc7e24cd546449ac9fdee4ad78aab861e0c89666",{"id":257,"repositoryId":115,"repositorySlug":116,"repositoryName":117,"repositoryPathWithNamespace":118,"ecosystem":80,"name":81,"identity":79,"version":120,"versionKey":258,"direct":82,"development":82,"sourceKind":259,"filePath":54,"blobSha":260,"sourceUrl":261,"commitSha":262},"component:8267e405449b7802188ad126","pypi:fonttools@4.58.5","uv-lock","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":264,"repositoryId":122,"repositorySlug":123,"repositoryName":124,"repositoryPathWithNamespace":125,"ecosystem":80,"name":81,"identity":79,"version":127,"versionKey":265,"direct":82,"development":82,"sourceKind":259,"filePath":54,"blobSha":266,"sourceUrl":267,"commitSha":268},"component:a9b65e46e7454e88000b6e20","pypi:fonttools@4.59.2","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":270,"repositoryId":129,"repositorySlug":130,"repositoryName":131,"repositoryPathWithNamespace":132,"ecosystem":80,"name":81,"identity":79,"version":134,"versionKey":271,"direct":82,"development":82,"sourceKind":259,"filePath":54,"blobSha":272,"sourceUrl":273,"commitSha":274},"component:e7d2aebb16a3c6ec5aa6b4e4","pypi:fonttools@4.55.3","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"id":276,"repositoryId":136,"repositorySlug":137,"repositoryName":138,"repositoryPathWithNamespace":139,"ecosystem":80,"name":81,"identity":79,"version":106,"versionKey":251,"direct":82,"development":82,"sourceKind":277,"filePath":278,"blobSha":279,"sourceUrl":280,"commitSha":281},"component:d97a0a90bc2307014b711dfd","sbom-json","sbom.json","90b7d669fbf37c00e7bd5bf4e73a60e7eb78927e","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fphotovoltaic_systems\u002F-\u002Fblob\u002Fd0ec9137f2985f323b9aad141d83c47d14c64cce\u002Fsbom.json","d0ec9137f2985f323b9aad141d83c47d14c64cce",{"id":283,"repositoryId":142,"repositorySlug":143,"repositoryName":144,"repositoryPathWithNamespace":145,"ecosystem":80,"name":81,"identity":79,"version":147,"versionKey":284,"direct":82,"development":82,"sourceKind":259,"filePath":54,"blobSha":285,"sourceUrl":286,"commitSha":287},"component:99dfc957d7463a6d88a0c253","pypi:fonttools@4.61.1","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae",{"id":289,"repositoryId":108,"repositorySlug":109,"repositoryName":110,"repositoryPathWithNamespace":111,"ecosystem":80,"name":81,"identity":79,"version":113,"versionKey":290,"direct":82,"development":45,"sourceKind":252,"filePath":55,"blobSha":291,"sourceUrl":292,"commitSha":293},"component:c8044fa80d899ac77cfda62d","pypi:fonttools@4.62.1","6b17710ca48cf83827a909c320d60853c75d7960","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fblob\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f\u002Fpoetry.lock","1d70807d48a8fae19711b10422c3417ab5d05d0f",{"id":295,"repositoryId":93,"repositorySlug":94,"repositoryName":95,"repositoryPathWithNamespace":96,"ecosystem":80,"name":81,"identity":79,"version":98,"versionKey":296,"direct":82,"development":45,"sourceKind":252,"filePath":55,"blobSha":297,"sourceUrl":298,"commitSha":299},"component:76d726c75515765db12a6413","pypi:fonttools@4.57.0","681193f56a8b37b97336b2682fc1147ac3bdab1f","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fblob\u002F1dd9cd8ca823a7998b729adce6957848cf241d54\u002Fpoetry.lock","1dd9cd8ca823a7998b729adce6957848cf241d54",{"id":301,"repositoryId":93,"repositorySlug":94,"repositoryName":95,"repositoryPathWithNamespace":96,"ecosystem":80,"name":81,"identity":79,"version":98,"versionKey":296,"direct":82,"development":82,"sourceKind":277,"filePath":278,"blobSha":302,"sourceUrl":303,"commitSha":299},"component:7c0322d8a48afa757cf77eac","bce3149701e5462f1af80e9221c0e2967402d606","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fblob\u002F1dd9cd8ca823a7998b729adce6957848cf241d54\u002Fsbom.json",{"repositories":305,"vulnerabilities":322},[306,308,310,312,314,316,318,320],{"id":93,"slug":94,"name":95,"pathWithNamespace":96,"versions":307,"evidenceCount":99},[98],{"id":101,"slug":102,"name":103,"pathWithNamespace":104,"versions":309,"evidenceCount":32},[106],{"id":108,"slug":109,"name":110,"pathWithNamespace":111,"versions":311,"evidenceCount":32},[113],{"id":115,"slug":116,"name":117,"pathWithNamespace":118,"versions":313,"evidenceCount":32},[120],{"id":122,"slug":123,"name":124,"pathWithNamespace":125,"versions":315,"evidenceCount":32},[127],{"id":129,"slug":130,"name":131,"pathWithNamespace":132,"versions":317,"evidenceCount":32},[134],{"id":136,"slug":137,"name":138,"pathWithNamespace":139,"versions":319,"evidenceCount":32},[106],{"id":142,"slug":143,"name":144,"pathWithNamespace":145,"versions":321,"evidenceCount":32},[147],[323],{"id":89,"slug":324,"dossier":45,"summary":325,"aliases":326,"sourceIds":328,"published":329,"modified":330,"checkedAt":7,"severity":331,"references":335,"versionKeys":350,"packageCount":32,"repositoryCount":64},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[327,158],"CVE-2025-66034",[89,158],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[332],{"type":333,"score":334},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[336,339,342,344,346,348],{"type":337,"url":338},"WEB","https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":340,"url":341},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":337,"url":343},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":345,"url":229},"PACKAGE",{"type":345,"url":347},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":340,"url":349},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[271,296,251,258,265],1786593602197]