Is kuleshov-group/caduceus-ph_seqlen-131k_d_model-256_n_layer-16 safe to load?
CyberXYZ rates kuleshov-group/caduceus-ph_seqlen-131k_d_model-256_n_layer-16 LOW. No version-matched advisories and no malicious packages. It depends on 124 tracked packages, and 4 carry advisories. It ships Python that runs when the model is loaded (trust_remote_code).
MEDIUMconfig.json declares `auto_map` — from_pretrained(trust_remote_code=True) executes Python shipped in this repo.
2 more findings on this model.
- Author
- kuleshov-group
- Task
- fill-mask
- Loader
- transformers
- License
- apache-2.0
- Downloads
- 283,314
- Remote code
- ships Python that runs on load (trust_remote_code)
14 direct, 11 with findings, 117 reachable
| Package | Evidence | Advisories | Worst |
|---|---|---|---|
| transformers | direct, runtime | 24 | none pinned |
| torch | direct, runtime | 13 | none pinned |
Is kuleshov-group/caduceus-ph_seqlen-131k_d_model-256_n_layer-16 safe to load?
CyberXYZ does not call a model safe in absolute terms. It rates kuleshov-group/caduceus-ph_seqlen-131k_d_model-256_n_layer-16 LOW. No version-matched advisories and no malicious packages. That covers its dependencies and how it loads, not every file it ships, so treat any check that did not run as unverified and check the exact files before you load them.
What does kuleshov-group/caduceus-ph_seqlen-131k_d_model-256_n_layer-16 depend on?
CyberXYZ tracks 124 dependencies for kuleshov-group/caduceus-ph_seqlen-131k_d_model-256_n_layer-16, 14 of them direct. 4 carry advisories. They include transformers and torch. A free account lists all of them.
Does kuleshov-group/caduceus-ph_seqlen-131k_d_model-256_n_layer-16 run code when it loads?
Yes, it can. kuleshov-group/caduceus-ph_seqlen-131k_d_model-256_n_layer-16 ships Python code and HuggingFace marks it trust_remote_code, so loading it with trust_remote_code enabled runs that code on your machine. Read the code first.
How do I check kuleshov-group/caduceus-ph_seqlen-131k_d_model-256_n_layer-16 before loading it?
Run the xyz MCP tool model_load_safety on kuleshov-group/caduceus-ph_seqlen-131k_d_model-256_n_layer-16 to get a verdict on its weight files before you load them, or search it in CyberXYZ Check at https://cyberxyz.io/check?q=kuleshov-group%2Fcaduceus-ph_seqlen-131k_d_model-256_n_layer-16.
Risk computed 2026-11-14 at 14:50 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.