ai model report

Is internlm/Intern-Decision-4B safe to load?

MEDIUM risk. 4 of 83 tracked dependencies carry advisories. Driven by torch 2.9.1 · GHSA-qfhq-4f3w-5fph.

View on HuggingFace

// posture

fig. 01 — posture on eight axes, 100 is clean. Weakest: code execution at 70.

// the finding

2.7xyz score out of 10MEDIUM

MEDIUM1 declared install(s) version-match medium/low advisories.

2 more findings on this model.

Author: internlm
Task: image-text-to-text
Loader: transformers
License: apache-2.0
Downloads: 123
Remote code: not required

// dependencies

14 direct, 10 with findings, 75 reachable

Package	Evidence	Advisories	Worst
torch	direct, install	12	LOW
pillow	direct, install	70	none pinned
transformers	direct, install	23	hidden
numpy	direct, install	8	hidden
huggingface-hub	direct, install	0	hidden
safetensors	direct, install	0	hidden
tokenizers	direct, install	0	hidden
torchvision	direct, install	0	hidden

Create a free accountto see all 83 dependencies, which versions are pinned, and what to change.

Risk computed 2026-09-27 at 18:47 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.