ai model report
Is Hcompany/Holo4-27B safe to load?
CLEAN risk. 3 of 36 tracked dependencies carry advisories. Driven by No version-matched advisories and no malicious packages..
not scoredno advisory applies to a version this model pinsCLEAN
INFOconfig.json was authored against transformers 5.6.2, which has known advisories. Consumers normally install a current version — this only bites if you pin for reproducibility.
1 more finding on this model.
- Author
- Hcompany
- Task
- image-text-to-text
- Loader
- transformers
- License
- cc-by-nc-4.0
- Downloads
- 291
- Remote code
- not required
7 direct, 4 with findings, 30 reachable
| Package | Evidence | Advisories | Worst |
|---|---|---|---|
| transformers | direct, runtime | 23 | none pinned |
| torch | direct, inferred | 12 | none pinned |
Create a free accountto see all 36 dependencies, which versions are pinned, and what to change.
Risk computed 2026-09-30 at 19:54 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.