// posture advisories 100 provenance 75 resolution 100 xyz safety 100 load safety 100 supply chain 100 scanner trust 100 code execution 70 fig. 01 — posture on eight axes, 100 is clean. Weakest: code execution at 70. // the finding 0.0 xyz score out of 10 MEDIUM
MEDIUM 1 confirmed finding(s) in the transitive closure; declared dependencies alone rate CLEAN
INFO authored against vulnerable: further detail on this finding is available to account holders.INFO inferred stack advisories: further detail on this finding is available to account holders.2 more findings on this model.
Author tencent Task translation Loader transformers License apache-2.0 Downloads 13,729 Remote code not required // dependencies 26 direct, 18 with findings, 251 reachable
Package Evidence Advisories Worst accelerate transitive, transitive 1 MEDIUM transformers direct, runtime 23 none pinned torch direct, install 13 hidden numpy direct, install 8 hidden llamafactory direct, install 4 hidden deepspeed direct, install 1 hidden huggingface-hub direct, install 0 hidden peft direct, install 0 hidden
Risk computed 2026-09-22 at 18:44 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.
Model risk is computed from the model's declared and observed Python dependencies and the code it ships. If a finding is wrong, tell us. Report an issue with this page