ai model report

Is ZhengPeng7/BiRefNet_lite safe to load?

HIGH risk. 9 of 237 tracked dependencies carry advisories. Driven by torch 2.5.1 · GHSA-53q9-r3pm-6pq6.

View on HuggingFace

// posture
advisories 0provenance 100resolution 100xyz safety 43load safety 100supply chain 100scanner trust 100code execution 25
fig. 01 — posture on eight axes, 100 is clean. Weakest: advisories at 0.
// the finding
5.7xyz score out of 10HIGH

HIGHDeclared install pins version-matched high/critical advisories: torch 2.5.1

3 more findings on this model.

Author
ZhengPeng7
Task
image-segmentation
Loader
birefnet
License
mit
Downloads
283,862
Remote code
ships Python that runs on load (trust_remote_code)
// dependencies

29 direct, 17 with findings, 221 reachable

PackageEvidenceAdvisoriesWorst
torchdirect, install13CRITICAL
pillowdirect, runtime145none pinned
Create a free accountto see all 237 dependencies, which versions are pinned, and what to change.
// what changed
  • HIGHrisk level raised (medium to high)2026-09-21

Risk computed 2026-11-06 at 21:51 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.

Model risk is computed from the model's declared and observed Python dependencies and the code it ships. If a finding is wrong, tell us.