ai model report
Is InstantX/InstantID safe to load?
CLEAN risk. 5 of 37 tracked dependencies carry advisories. Driven by No version-matched advisories and no malicious packages..
not scoredno advisory applies to a version this model pinsCLEAN
LOWShips safetensors plus 1 pickle checkpoint(s) for other tooling (ip-adapter.bin); from_pretrained never loads these, even with use_safetensors=False, but code that torch.load()s them directly (a reference implementation, a training script) executes pickle.
1 more finding on this model.
- Author
- InstantX
- Task
- text-to-image
- Loader
- diffusers
- License
- apache-2.0
- Downloads
- 75,422
- Remote code
- not required
6 direct, 5 with findings, 31 reachable
| Package | Evidence | Advisories | Worst |
|---|---|---|---|
| transformers | direct, inferred | 24 | none pinned |
| torch | direct, inferred | 12 | none pinned |
Create a free accountto see all 37 dependencies, which versions are pinned, and what to change.
Risk computed 2026-10-12 at 01:45 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.