// posture advisories 100 provenance 70 resolution 100 xyz safety 100 load safety 100 supply chain 100 scanner trust 100 code execution 70 fig. 01 — posture on eight axes, 100 is clean. Weakest: provenance at 70. // the finding 0.0 xyz score out of 10 MEDIUM
MEDIUM 2 confirmed finding(s) in the transitive closure; declared dependencies alone rate LOW
LOW weights overwritten: further detail on this finding is available to account holders.INFO inferred stack advisories: further detail on this finding is available to account holders.2 more findings on this model.
Author tencent Task visual-document-retrieval Loader colpali-engine License apache-2.0 Downloads 1,765 Remote code not required // dependencies 36 direct, 29 with findings, 254 reachable
Package Evidence Advisories Worst accelerate transitive, transitive 1 MEDIUM accelerate transitive, transitive 1 MEDIUM pillow direct, install 71 hidden transformers direct, install 23 hidden torch direct, install 13 hidden pyarrow direct, install 3 hidden scikit-learn direct, install 3 hidden accelerate direct, install 1 hidden
Risk computed 2026-09-22 at 18:46 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.
Model risk is computed from the model's declared and observed Python dependencies and the code it ships. If a finding is wrong, tell us. Report an issue with this page