ai model report

Is jinaai/jina-reranker-v1-tiny-en safe to load?

LOW risk. 5 of 92 tracked dependencies carry advisories. Driven by No version-matched advisories and no malicious packages..

View on HuggingFace

// posture

fig. 01 — posture on eight axes, 100 is clean. Weakest: code execution at 25.

// the finding

not scoredno advisory applies to a version this model pinsLOW

MEDIUMconfig.json declares `auto_map` — from_pretrained(trust_remote_code=True) executes Python shipped in this repo.

3 more findings on this model.

Author: jinaai
Task: text-ranking
Loader: transformers
License: apache-2.0
Downloads: 11,725
Remote code: ships Python that runs on load (trust_remote_code)

// dependencies

13 direct, 10 with findings, 84 reachable

Package	Evidence	Advisories	Worst
tensorflow	direct, runtime	434	none pinned
transformers	direct, runtime	24	none pinned
torch	direct, install	13	hidden
numpy	direct, install	8	hidden
tqdm	direct, install	2	hidden
huggingface-hub	direct, install	0	hidden
safetensors	direct, install	0	hidden
tokenizers	direct, install	0	hidden

Create a free accountto see all 92 dependencies, which versions are pinned, and what to change.

Risk computed 2026-11-07 at 13:03 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.