ai model report

Is nvidia/NVIDIA-Nemotron-Nano-12B-v2-VL-NVFP4-QAD safe to load?

LOW risk. 6 of 361 tracked dependencies carry advisories. Driven by No version-matched advisories and no malicious packages..

View on HuggingFace

// posture

fig. 01 — posture on eight axes, 100 is clean. Weakest: code execution at 25.

// the finding

not scoredno advisory applies to a version this model pinsLOW

MEDIUMconfig.json declares `auto_map` — from_pretrained(trust_remote_code=True) executes Python shipped in this repo.

2 more findings on this model.

Author: nvidia
Task: image-text-to-text
Loader: transformers
License: other
Downloads: 101,504
Remote code: ships Python that runs on load (trust_remote_code)

// dependencies

34 direct, 25 with findings, 347 reachable

Package	Evidence	Advisories	Worst
vllm	direct, runtime	88	none pinned
pillow	direct, runtime	76	none pinned
transformers	direct, install	24	hidden
torch	direct, install	12	hidden
numpy	direct, install	8	hidden
mamba-ssm	direct, install	1	hidden
causal-conv1d	direct, install	0	hidden
decord	direct, install	0	hidden

Create a free accountto see all 361 dependencies, which versions are pinned, and what to change.

Risk computed 2026-10-06 at 01:50 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.