Is aac6fef/laya-mlx safe to load?
CyberXYZ rates aac6fef/laya-mlx CLEAN. No version-matched advisories and no malicious packages. It depends on 3 tracked packages, and 2 carry advisories. It does not require trust_remote_code.
INFO2 package(s) in the runtime/inferred stack carry advisories. Not counted toward risk — no version is declared, so we can't say which one gets installed.
- Author
- aac6fef
- Task
- text-classification
- Loader
- mlx
- License
- apache-2.0
- Downloads
- 0
- Remote code
- not required
2 direct, 2 with findings, 1 reachable
| Package | Evidence | Advisories | Worst |
|---|---|---|---|
| numpy | direct, inferred | 8 | none pinned |
| mlx | direct, runtime | 2 | none pinned |
Is aac6fef/laya-mlx safe to load?
CyberXYZ does not call a model safe in absolute terms. It rates aac6fef/laya-mlx CLEAN. No version-matched advisories and no malicious packages. That covers its dependencies and how it loads, not every file it ships, so treat any check that did not run as unverified and check the exact files before you load them.
What does aac6fef/laya-mlx depend on?
CyberXYZ tracks 3 dependencies for aac6fef/laya-mlx, 2 of them direct. 2 carry advisories. They include numpy and mlx. A free account lists all of them.
Does aac6fef/laya-mlx run code when it loads?
HuggingFace does not mark aac6fef/laya-mlx as requiring trust_remote_code. That says nothing about the format of its weight files, which model_load_safety checks per file.
How do I check aac6fef/laya-mlx before loading it?
Run the xyz MCP tool model_load_safety on aac6fef/laya-mlx to get a verdict on its weight files before you load them, or search it in CyberXYZ Check at https://cyberxyz.io/check?q=aac6fef%2Flaya-mlx.
Risk computed 2026-11-14 at 13:41 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.