ai model report

Is apple/DFN2B-CLIP-ViT-B-16 safe to load?

CyberXYZ rates apple/DFN2B-CLIP-ViT-B-16 CLEAN. No version-matched advisories and no malicious packages. It depends on 57 tracked packages, and 1 carries advisories. It does not require trust_remote_code.

View on HuggingFace

// posture
advisories 100provenance 100resolution 100xyz safety 100load safety 20supply chain 100scanner trust 100code execution 100
fig. 01 — posture on eight axes, 100 is clean. Weakest: load safety at 20.
// the finding
not scoredno advisory applies to a version this model pinsCLEAN

INFO1 package(s) in the runtime/inferred stack carry advisories. Not counted toward risk — no version is declared, so we can't say which one gets installed.

Author
apple
Loader
open_clip
License
apple-amlr
Downloads
267,507
Remote code
not required
// dependencies

5 direct, 1 with findings, 52 reachable

PackageEvidenceAdvisoriesWorst
torchdirect, inferred13none pinned
ftfydirect, inferred0none pinned
Create a free accountto see all 57 dependencies, which versions are pinned, and what to change.
// questions
Is apple/DFN2B-CLIP-ViT-B-16 safe to load?

CyberXYZ does not call a model safe in absolute terms. It rates apple/DFN2B-CLIP-ViT-B-16 CLEAN. No version-matched advisories and no malicious packages. That covers its dependencies and how it loads, not every file it ships, so treat any check that did not run as unverified and check the exact files before you load them.

What does apple/DFN2B-CLIP-ViT-B-16 depend on?

CyberXYZ tracks 57 dependencies for apple/DFN2B-CLIP-ViT-B-16, 5 of them direct. 1 carries advisories. They include torch and ftfy. A free account lists all of them.

Does apple/DFN2B-CLIP-ViT-B-16 run code when it loads?

HuggingFace does not mark apple/DFN2B-CLIP-ViT-B-16 as requiring trust_remote_code. That says nothing about the format of its weight files, which model_load_safety checks per file.

How do I check apple/DFN2B-CLIP-ViT-B-16 before loading it?

Run the xyz MCP tool model_load_safety on apple/DFN2B-CLIP-ViT-B-16 to get a verdict on its weight files before you load them, or search it in CyberXYZ Check at https://cyberxyz.io/check?q=apple%2FDFN2B-CLIP-ViT-B-16.


Risk computed 2026-11-14 at 10:42 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.

Model risk is computed from the model's declared and observed Python dependencies and the code it ships. If a finding is wrong, tell us.