ai model report
Is lodestones/Kromoss safe to load?
LOW risk. 5 of 87 tracked dependencies carry advisories. Driven by No version-matched advisories and no malicious packages..
not scoredno advisory applies to a version this model pinsLOW
LOWThe repo's commit SHA changed since we first saw it — weights were replaced.
1 more finding on this model.
- Author
- lodestones
- Task
- text-to-image
- Loader
- diffusers
- License
- apache-2.0
- Downloads
- 264
- Remote code
- not required
19 direct, 16 with findings, 81 reachable
| Package | Evidence | Advisories | Worst |
|---|---|---|---|
| transformers | direct, runtime | 24 | none pinned |
| torch | direct, runtime | 12 | none pinned |
Create a free accountto see all 87 dependencies, which versions are pinned, and what to change.
Risk computed 2026-10-19 at 20:54 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.