ai model report

Is ATH-MaaS/OvisOCR3 safe to load?

CLEAN risk. 5 of 225 tracked dependencies carry advisories. Driven by No version-matched advisories and no malicious packages..

View on HuggingFace

// posture

fig. 01 — posture on eight axes, 100 is clean. Weakest: code execution at 70.

// the finding

not scoredno advisory applies to a version this model pinsCLEAN

INFOconfig.json was authored against transformers 4.57.0.dev0, which has known advisories. Consumers normally install a current version — this only bites if you pin for reproducibility.

1 more finding on this model.

Author: ATH-MaaS
Task: image-text-to-text
Loader: transformers
License: apache-2.0
Downloads: 224
Remote code: not required

// dependencies

12 direct, 6 with findings, 214 reachable

Package	Evidence	Advisories	Worst
pillow	direct, runtime	144	none pinned
vllm	direct, runtime	92	none pinned
transformers	direct, install	24	hidden
torch	direct, install	12	hidden
numpy	direct, install	8	hidden
beautifulsoup4	direct, install	0	hidden
huggingface-hub	direct, install	0	hidden
markdown-it	direct, install	0	hidden

Create a free accountto see all 225 dependencies, which versions are pinned, and what to change.

Risk computed 2026-10-23 at 17:55 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.